npm/gatsby-plugin-sharp CVE-2023-30548: medium 4.3, EPSS 0.88%
Path traversal vulnerability in gatsby-plugin-sharp
Action: Upgrade gatsby-plugin-sharp to 4.25.1 or later.
npm i gatsby-plugin-sharp@5.8.1npm i gatsby-plugin-sharp@4.25.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.8.1 | - |
| 0 | 4.25.1 | - |
Fixed versions
| 5.8.1 | 4.25.1 |
Sources
- osv: GHSA-h2pm-378c-pcxx
- https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-h2pm-378c-pcxx
- https://nvd.nist.gov/vuln/detail/CVE-2023-30548
- https://github.com/gatsbyjs/gatsby/commit/5f442081b227cc0879babb96858f970c4ce94c6b
- https://github.com/gatsbyjs/gatsby/commit/dcf88ed01df2c26e0c93a41e1a2a840076d8247e
- https://github.com/gatsbyjs/gatsby
CVE-2023-30548 · published · modified · JSON