|Affected package||Vulnerable versions||Latest version||Snyk patch|
Old versions of
bassmaster, a Hapi server plugin used to process batches of requests, use the
eval method as part of its processing and validation of user input.
eval function without limitation.
Update to bassmaster version 1.5.2 or greater.
Available for versions:
- <=1.5.1 >=0.4.0 || <=0.3.0 >=0.0.1
See patch on GitHub