npm/mxgraph CVE-2022-40440: medium 6.1, EPSS 0.70%
mxGraph vulnerable to cross-site scripting in setTooltips function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.2.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-j4rv-pr9g-q8jv
- https://nvd.nist.gov/vuln/detail/CVE-2022-40440
- https://github.com/SxB64/mxgraph-xss-vul/wiki
- https://github.com/jgraph/mxgraph
CVE-2022-40440 · published · modified · JSON