npm/react: high
Cross-Site Scripting in react
Action: Upgrade react to 0.14.0 or later.
npm i react@0.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 0.14.0 | - |
Fixed versions
| 0.14.0 |
Sources
- osv: GHSA-hg79-j56m-fxgv
- https://github.com/facebook/react
- https://reactjs.org/blog/2015/10/07/react-v0.14.html#notable-enhancements
- https://reactjs.org/blog/2019/10/22/react-release-channels.html#experimental-channel
- https://snyk.io/vuln/npm:react:20150318
- https://www.npmjs.com/advisories/1347
- http://danlec.com/blog/xss-via-a-spoofed-react-element
published · modified · JSON