nconf

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2022-21803unspecified – < 0.11.4Prototype PollutionHIGH 7.51.8 %