npm/crumb CVE-2014-7193: medium, EPSS 1.37%
CORS Token Disclosure in crumb
Action: Upgrade crumb to 3.0.0 or later.
npm i crumb@3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-84fq-6626-w5fg
- https://nvd.nist.gov/vuln/detail/CVE-2014-7193
- https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c
- https://github.com/spumko/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c
- https://github.com/advisories/GHSA-84fq-6626-w5fg
- https://www.npmjs.com/advisories/4
CVE-2014-7193 · published · modified · JSON