npm/@keystone-next/auth CVE-2022-0087: high 7.1, EPSS 2.60%
Reflected cross-site scripting (XSS) vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 37.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hrgx-7j6v-xj82#npm/@keystone-next/auth
- https://github.com/keystonejs/keystone/security/advisories/GHSA-hrgx-7j6v-xj82
- https://nvd.nist.gov/vuln/detail/CVE-2022-0087
- https://github.com/keystonejs/keystone/commit/96bf833a23b1a0a5d365cf394467a943cc481b38
- https://github.com/keystonejs/keystone
- https://huntr.dev/bounties/c9d7374f-2cb9-4bac-9c90-a965942f413e
CVE-2022-0087 · published · modified · JSON