Skip to main content
cve.nowby Sazabi
← npm
npmPackage

bassmaster

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
3.2.0 (Sep 30, 2018): no advisory affects it
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1
Weekly downloads
310
Dependents
2
Releases
28 since 0.0.1 (Mar 4, 2013)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server…

    Affected: fixed in 1.5.2.

    Fixed in 1.5.2 (released Sep 26, 2014, 12 days before disclosure).

    The latest release, 3.2.0, is not affected.

    20% of bassmaster downloads last week were affected versions (56).