A vulnerability was found in squirrellyjs squirrelly 9.0.0. It has been rated as critical. This issue affects the function
options.varName
. The manipulation leads to code injection.
The identification of this vulnerability is CVE-2024-40453. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.