npm/@vendure/core: low
Vendure Cross Site Request Forgery vulnerability impacting all API requests
Action: Upgrade @vendure/core to 2.0.3 or later.
npm i @vendure/core@2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-h9wq-xcqx-mqxm
- https://github.com/vendure-ecommerce/vendure/security/advisories/GHSA-h9wq-xcqx-mqxm
- https://github.com/vendure-ecommerce/vendure/commit/4a10d6785a3bf792ddf84053cdf232c205b82c81
- https://github.com/vendure-ecommerce/vendure
published · modified · JSON