-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| posix | npm | <= 4.2.0 |
JavaScriptJavaScriptMiggo AIRoot Cause AnalysisThe vulnerability manifests when calling toString() on user-controlled input within setegid. The PoC demonstrates passing {toString:1} to setegid, which attempts to invoke 1 as a function. This matches the CWE-252 pattern where return values/object properties are not properly validated before use. While exact file paths aren't disclosed, the function name and attack pattern are clearly identified in the PoC and vulnerability description.
KEV Misses 88% of Exploited CVEs- Get the report