npm/preact: medium
HTML Injection in preact
Action: Upgrade preact to 10.0.0-beta.1 or later.
npm i preact@10.0.0-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0-alpha.0 | 10.0.0-beta.1 | - |
Fixed versions
| 10.0.0-beta.1 |
Sources
- osv: GHSA-cg48-9hh2-x6mx
- https://github.com/developit/preact/pull/1528
- https://github.com/developit/preact
- https://github.com/developit/preact/releases/tag/10.0.0-beta.1
- https://medium.com/dailyjs/exploiting-script-injection-flaws-in-reactjs-883fb1fe36c1
- https://www.npmjs.com/advisories/835
published · modified · JSON