npm/qwc2 CVE-2025-11183: medium 6.9, EPSS 0.42%
QGIS QWC2 Cross-Site Scripting vulnerability
Action: Upgrade qwc2 to 2025.08.14 or later.
npm i qwc2@2025.08.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.08.14 | - |
Fixed versions
| 2025.08.14 |
Sources
- osv: GHSA-gxp8-m5rq-3m38
- nvd: CVE-2025-11183
- https://github.com/qgis/qwc2
- https://hub.ntc.swiss/ntcf-2025-4286
CVE-2025-11183 · published · modified · JSON