T-DEMO-01
demo-parse advisory
Threat Intel matches the mock OSV item to SBOMs and opens the incident. The id stays in the CSDEMO- namespace.
CriticalCSDEMO-2026-0001
CSDEMO-2026-0001 — Demo only: prototype pollution in demo-parse parseUnsafe(). The package in this lab is pkg:npm/demo-parse@2.1.0. Versions from 2.0.0 up to, but not including, 2.1.4 are affected.
- Published
- Package
- pkg:npm/demo-parse@2.1.0
- Fixed in
- 2.1.4