CVE:CVE-2021-25946
CNNVD:CNNVD-202105-1656
nconf是TOML 格式的插件。
nconf-toml 0.0.1版本至0.0.2版本存在安全漏洞，攻击者利用该漏洞可导致拒绝服务并可能导致远程代码执行。
solution:Upgrade nconf-toml_project nconf-toml to a higher version than 0.0.2,and avoid the version [0.0.1,0.0.2]