Vulnerabilities > C2Fo

DATE CVE VULNERABILITY TITLE RISK
2021-12-10 CVE-2021-23561 Unspecified vulnerability in C2Fo Comb
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function.
network
low complexity
c2fo
critical
9.8
2020-12-08 CVE-2020-26256 Resource Exhaustion vulnerability in C2Fo Fast-Csv
Fast-csv is an npm package for parsing and formatting CSVs or any other delimited value file in node.
network
low complexity
c2fo CWE-400
6.5