redoxengine / redox-hl7-v2 Goto Github PK

A vulnerability exists in Async through 3.2.1 (fixed in 3.2.2) , which could let a malicious user obtain privileges via the mapValues() method.
Upgrade to version 3.2.2 or later
- https://nvd.nist.gov/vuln/detail/CVE-2021-43138
- https://github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d
- https://github.com/caolan/async/blob/master/lib/internal/iterator.js
- https://github.com/caolan/async/blob/master/lib/mapValuesLimit.js
- https://jsfiddle.net/oz5twjd9/
- https://github.com/advisories/GHSA-fwr7-v2mv-hh25

MSH|^~\&|PRIMARY|EWHIN|SPOCARD|EWHIN|200701010800||SRM^S01^SRM_S01|090849PRIMARY|P|2.5.1|||AL|AL|||
ARQ|19940047^SCH001|||||047^Referral||NORMAL|||199401020800^199401101700||||0045^Contact^Carrie^S^^^||||3372^Person^Entered||||
PID||4875439|484848||Everyman^Adam^A^^| |19401121|M|Alias||2222 Home Street^Jay^WA^99021||555-2003|||M|||444-33-3333|||||||||||
DG1|001|I9|786.5|CHEST PAINS|200701010730|W|||||||||||||
DG1|002|I9|412|OLD MYOCARDIAL INFARCTION|200701010730|W|||||||||||||
RGS|001|
AIP|001||032^Pump^Patrick|002^CARDIOLOGIST|||||||NO|
AIL|001|^NORTH OFFICE|002^CLINIC|||||||YES|