npm/@keystone-6/auth CVE-2022-0087: high 7.1, EPSS 2.60%
Reflected cross-site scripting (XSS) vulnerability
Action: Upgrade @keystone-6/auth to 1.0.2 or later.
npm i @keystone-6/auth@1.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.2 | - |
Fixed versions
| 1.0.2 |
Sources
- osv: GHSA-hrgx-7j6v-xj82
- https://github.com/keystonejs/keystone/security/advisories/GHSA-hrgx-7j6v-xj82
- https://nvd.nist.gov/vuln/detail/CVE-2022-0087
- https://github.com/keystonejs/keystone/commit/96bf833a23b1a0a5d365cf394467a943cc481b38
- https://github.com/keystonejs/keystone
- https://huntr.dev/bounties/c9d7374f-2cb9-4bac-9c90-a965942f413e
CVE-2022-0087 · published · modified · JSON