npm/@evershop/evershop CVE-2023-46943: high 7.4, EPSS 0.50%

EverShop at risk to unauthorized access via weak HMAC secret

Action: Upgrade @evershop/evershop to 1.0.0-rc.9 or later.

npm i @evershop/evershop@1.0.0-rc.9

Affected

Fixed versions

Sources

• osv: GHSA-32r3-57hp-cgfw
• https://nvd.nist.gov/vuln/detail/CVE-2023-46943
• https://github.com/evershopcommerce/evershop/commit/96d9ca3e024e0b63c538911e4a914df3d287cc9f
• https://advisory.checkmarx.net/advisory/CVE-2023-46943
• https://devhub.checkmarx.com/cve-details/CVE-2023-46943
• https://github.com/evershopcommerce/evershop

CVE-2023-46943 · published 2024-01-13T03:30:17Z · modified 2024-11-18T16:26:35Z · JSON