npm/buttercup CVE-2023-41646: medium 5.3, EPSS 0.47%
Buttercup allows attackers to obtain the hash of the master password
Action: Upgrade buttercup to 7.4.0 or later.
npm i buttercup@7.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.20.3 | 7.4.0 | - |
Fixed versions
| 7.4.0 |
Sources
- osv: GHSA-7cwq-p8cr-h9qg
- https://nvd.nist.gov/vuln/detail/CVE-2023-41646
- https://github.com/buttercup/buttercup-core/issues/336
- https://github.com/buttercup/buttercup-core/commit/77fbcdfe4caf57486a3c83c07fc6d36bb0e1d3e1
- https://buttercup.pw
- https://github.com/buttercup/buttercup-core
- https://github.com/tristao-marinho/CVE-2023-41646
CVE-2023-41646 · published · modified · JSON