| Package | Affected versions | Patched versions |
|---|---|---|
| enrich | < 5.1.1 | 5.1.1 |
An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free