npm/c3 CVE-2016-1000240: medium

Cross-Site Scripting in c3

Action: Upgrade c3 to 0.4.11 or later.

npm i c3@0.4.11

Affected

Fixed versions

Sources

• osv: GHSA-gvg7-pp82-cff3
• https://nvd.nist.gov/vuln/detail/CVE-2016-1000240
• https://github.com/c3js/c3/issues/1536
• https://github.com/c3js/c3/pull/1675
• https://github.com/c3js/c3/commit/de3864650300488a63d0541620e9828b00e94b42
• https://github.com/c3js/c3
• https://www.npmjs.com/advisories/138

CVE-2016-1000240 · published 2020-09-01T15:59:11Z · modified 2023-11-08T03:58:08.335223Z · JSON