| Package | Affected versions | Patched versions |
|---|---|---|
| total.js | < 3.4.9 | 3.4.9 |
| total.js | < 3.4.9 | 3.4.9 |
The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free