Every CVESearch/Get API key

GHSA-4wv4-mgfq-598v

Code injection in nobelprizeparser

No scoreFix available

Code injection through use of eval.

What each source reports

GitHub AdvisoriesNo score

Code injection in nobelprizeparser

Code injection through use of eval.

Record
GHSA-4wv4-mgfq-598v
Weakness
CWE-94
Updated
2026-11-02
OSVNo score

Code injection in nobelprizeparser

Code injection through use of eval.

Record
GHSA-4wv4-mgfq-598v
Weakness
CWE-94
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
nobelprizeparser
npm
before 1.0.2
1.0.2

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-4wv4-mgfq-598v is a vulnerability with no CVSS score yet in nobelprizeparser, published March 12, 2021. No source lists public exploit code. Fixed in nobelprizeparser 1.0.2.

References

MoveEnter Open