npm/react-svg: high
Cross-Site Scripting in react-svg
Action: Upgrade react-svg to 2.2.18 or later.
npm i react-svg@2.2.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.18 | - |
Fixed versions
| 2.2.18 |
Sources
- osv: GHSA-8xqr-4cpm-wx7g
- https://github.com/tanem/react-svg/pull/57
- https://github.com/tanem/react-svg/pull/57/commits/ec7de5d678f53a085cee1348cb1aa069c9fc42fb
- https://www.npmjs.com/advisories/648
published · modified · JSON