npm/diagram-js: medium
Cross-Site Scripting in diagram-js
Action: Upgrade diagram-js to 2.6.2 or later.
npm i diagram-js@2.6.2npm i diagram-js@3.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.2 | - |
| 3.0.0 | 3.3.1 | - |
Fixed versions
| 2.6.2 | 3.3.1 |
Sources
- osv: GHSA-8fw4-xh83-3j6q
- https://github.com/bpmn-io/diagram-js/commit/2565c40449379284a55163f290ec812db34244d1
- https://github.com/bpmn-io/diagram-js/commit/777fa06d70036daa9d02f3be6d0732cf4ccd8d6d
- https://bpmn.io/blog/posts/2019-html-injection-vulnerabilities-fixed.html
- https://github.com/bpmn-io/diagram-js
published · modified · JSON