npm/antsword CVE-2019-13970: medium 6.1, EPSS 1.87%
AntSword RCE and XSS via code injection
Action: Upgrade antsword to 2.1.0 or later.
npm i antsword@2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-hq75-ggc3-8h3q
- https://nvd.nist.gov/vuln/detail/CVE-2019-13970
- https://github.com/AntSwordProject/antSword/issues/151
- https://github.com/AntSwordProject/antSword/commit/4b932e81447b4b0475f4fce45525547395c249d3
- https://github.com/AntSwordProject/antSword
- https://github.com/AntSwordProject/antSword/compare/ed01dea...834063a
CVE-2019-13970 · published · modified · JSON