npm/shout CVE-2017-16043: medium, EPSS 1.00%

HTML Injection in shout

Action: Upgrade shout to 0.50.0 or later.

npm i shout@0.50.0

Affected

Fixed versions

Sources

• osv: GHSA-26q7-g57v-mxcp
• https://nvd.nist.gov/vuln/detail/CVE-2017-16043
• https://github.com/erming/shout/pull/344
• https://github.com/advisories/GHSA-26q7-g57v-mxcp
• https://www.npmjs.com/advisories/322

CVE-2017-16043 · published 2018-11-07T00:28:11Z · modified 2023-11-08T03:59:01.302318Z · JSON