npm/@pagefind/modular-ui CVE-2024-45389: medium 6.4, EPSS 0.42%
DOM clobbering could escalate to Cross-site Scripting (XSS)
Action: Upgrade @pagefind/modular-ui to 1.1.1 or later.
npm i @pagefind/modular-ui@1.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1 | - |
Fixed versions
| 1.1.1 |
Sources
- osv: GHSA-gprj-6m2f-j9hx#npm/@pagefind/modular-ui
- https://github.com/CloudCannon/pagefind/security/advisories/GHSA-gprj-6m2f-j9hx
- https://github.com/webpack/webpack/security/advisories/GHSA-4vvj-4cpr-p986
- https://nvd.nist.gov/vuln/detail/CVE-2024-45389
- https://github.com/CloudCannon/pagefind/commit/14ec96864eabaf1d7d809d5da0186a8856261eeb
- https://github.com/CloudCannon/pagefind
CVE-2024-45389 · published · modified · JSON