CVE-2021-33420

Name of the Vulnerable Software and Affected Versions inikulin replicator versions prior to 1.0.4

Description A deserialization issue in the inikulin replicator allows remote attackers to run arbitrary code via the fromSerializable function in the TypedArray object.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider disabling the fromSerializable function in the TypedArray object until a patch is available.