npm/metro4 CVE-2022-41376: medium 6.1, EPSS 0.58%
Cross site scripting in Metro UI
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.4.0 | - | 4.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-633r-r4p8-pw3w
- https://nvd.nist.gov/vuln/detail/CVE-2022-41376
- https://alicangonullu.org/konu/138
- https://github.com/olton/Metro-UI-CSS
- https://youtu.be/_wzGVpX54Rc
CVE-2022-41376 · published · modified · JSON