npm/vant: critical 9.1
Cross-Site Scripting in vant
Action: Upgrade vant to 2.1.8 or later.
npm i vant@2.1.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.8 | - |
Fixed versions
| 2.1.8 |
Sources
- osv: GHSA-9xr8-8hmc-389f
- https://github.com/youzan/vant/issues/4270
- https://github.com/youzan/vant/pull/4278/commits/d777b78c7dc2c904f474d057ea88449cfe2ca13a
- https://snyk.io/vuln/SNYK-JS-VANT-460461
- https://www.npmjs.com/advisories/1157
published · modified · JSON