npm/hexo-admin CVE-2019-17606: medium 6.1, EPSS 1.03%
hexo-admin plugin for Node.js XSS Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g784-q3p3-26rm
- https://nvd.nist.gov/vuln/detail/CVE-2019-17606
- https://github.com/jaredly/hexo-admin/issues/185
- https://github.com/418sec/hexo-admin/pull/2
- https://github.com/jaredly/hexo-admin/pull/203
- https://github.com/jaredly/hexo-admin
CVE-2019-17606 · published · modified · JSON