Description (CNA)
mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HackerOne / mssql.js node module | affected All versions |
CWE
CWE-506
References
ADP enrichment
No English description supplied.