npm/workflow: medium 5.3
Vercel Workflow Allows Webhook Creation with Predictable User-Specified Tokens
Action: Upgrade workflow to 4.2.0-beta.64 or later.
npm i workflow@4.2.0-beta.64Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.0-beta.64 | - |
Fixed versions
| 4.2.0-beta.64 |
Sources
- osv: GHSA-9r75-g2cr-3h76
- https://github.com/vercel/workflow/security/advisories/GHSA-9r75-g2cr-3h76
- https://github.com/vercel/workflow/commit/30e24d441e735635ffa4522198e6905d0e51e175
- https://github.com/vercel/workflow
- https://github.com/vercel/workflow/releases/tag/workflow%404.2.0-beta.64
published · modified · JSON