npm/another-date-picker: critical 9.8
Malicious Package in another-date-picker
Action: Upgrade another-date-picker to 2.0.45 or later.
npm i another-date-picker@2.0.45Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.43 | 2.0.45 | - |
Fixed versions
| 2.0.45 |
Sources
- osv: GHSA-2p62-c4rm-mr72
- https://github.com/bi-a/mydatepicker
- https://github.com/kekeh/mydatepicker
- https://snyk.io/vuln/SNYK-JS-ANOTHERDATEPICKER-451013
- https://www.npmjs.com/advisories/616
published · modified · JSON