GHSA-qc22-qwm9-j8rx
Remote Code Execution in npm-groovy-lint
GHSA-qc22-qwm9-j8rx is a vulnerability with no CVSS score yet in npm-groovy-lint, published December 20, 2021. No source lists public exploit code. Fixed in npm-groovy-lint 9.1.0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
9.1.0npm-groovy-lint
Description
Versions of npm-groovy-lint prior to 9.1.0 bundle vulnerable versions of the Log4j library which are subject to remote code execution via jndi rendering. As a result npm-groovy-lint prior to 9.1.0 is also vulnerable.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
npm-groovy-lintnpm | before 9.1.0 | 9.1.0 |
What each source reports
GitHub AdvisoriesNo score
Remote Code Execution in npm-groovy-lint
Versions of npm-groovy-lint prior to 9.1.0 bundle vulnerable versions of the Log4j library which are subject to remote code execution via jndi rendering. As a result npm-groovy-lint prior to 9.1.0 is also vulnerable.
- Record
GHSA-qc22-qwm9-j8rx- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
Remote Code Execution in npm-groovy-lint
Versions of npm-groovy-lint prior to 9.1.0 bundle vulnerable versions of the Log4j library which are subject to remote code execution via jndi rendering. As a result npm-groovy-lint prior to 9.1.0 is also vulnerable.
- Record
GHSA-qc22-qwm9-j8rx- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.