icatalina/CVE-2021-43616

PoC

Repo demonstrating CVE-2021-43616 / https://github.com/npm/cli/issues/2701

view exploit source poc_in_githubauthor icatalinapublished 2021-11-15catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-43616UScritical9.8OT highExploit
The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is in…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan