npm/auth0-lock CVE-2020-15119: medium 6.4, EPSS 0.55%
DOM-based XSS in auth0-lock
Action: Upgrade auth0-lock to 11.26.3 or later.
npm i auth0-lock@11.26.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.26.3 | - |
Fixed versions
| 11.26.3 |
Sources
- osv: GHSA-6gg3-pmm7-97xc
- https://github.com/auth0/lock/security/advisories/GHSA-6gg3-pmm7-97xc
- https://nvd.nist.gov/vuln/detail/CVE-2020-15119
- https://github.com/auth0/lock/commit/3711fb5b42afd40073a61a58759251f51e768b1b
CVE-2020-15119 · published · modified · JSON