npm/angular-server-side-configuration CVE-2023-28444: critical 9.9, EPSS 0.76%

angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend

Action: Upgrade angular-server-side-configuration to 15.1.0 or later.

npm i angular-server-side-configuration@15.1.0

Affected

Fixed versions

Sources

• osv: GHSA-gwvm-vrp4-4pp5
• https://github.com/kyubisation/angular-server-side-configuration/security/advisories/GHSA-gwvm-vrp4-4pp5
• https://nvd.nist.gov/vuln/detail/CVE-2023-28444
• https://github.com/kyubisation/angular-server-side-configuration/commit/d701f51260637a84ede278e248934e0437a7ff86
• https://github.com/kyubisation/angular-server-side-configuration
• https://github.com/kyubisation/angular-server-side-configuration/releases/tag/v15.1.0

CVE-2023-28444 · published 2023-03-24T22:04:35Z · modified 2023-11-08T04:12:11.200223Z · JSON