← Back

Async

async

Vendor: Async Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-43138
2Async Project
Fedoraproject
2Async
Fedora
Jun 17, 2026
Apr 6, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.