npm/verdaccio CVE-2019-14772: medium 6.1, EPSS 0.86%

Cross-Site Scripting (XSS) in Verdaccio

Action: Upgrade verdaccio to 3.12.0 or later.

npm i verdaccio@3.12.0

Affected

Fixed versions

Sources

• osv: GHSA-78j5-gcmf-vqc8
• https://github.com/verdaccio/verdaccio/security/advisories/GHSA-78j5-gcmf-vqc8
• https://nvd.nist.gov/vuln/detail/CVE-2019-14772
• https://github.com/verdaccio/verdaccio
• https://www.npmjs.com/advisories/832
• https://www.npmjs.com/advisories/833

CVE-2019-14772 · published 2019-05-29T18:02:59Z · modified 2026-09-10T03:48:11.691116963Z · JSON