Packagist/showdoc/showdoc CVE-2022-0938: medium 5.4, EPSS 0.64%

Cross-site Scripting in ShowDoc

Action: Upgrade showdoc/showdoc to 2.10.4 or later.

composer require showdoc/showdoc:2.10.4

Affected

Fixed versions

Sources

• osv: GHSA-mw75-qvfr-hpmr
• https://nvd.nist.gov/vuln/detail/CVE-2022-0938
• https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55
• https://github.com/star7th/showdoc
• https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e

CVE-2022-0938 · published 2022-03-15T00:01:01Z · modified 2023-11-08T04:07:42.999291Z · JSON