npm/csrf-csrf: low
Incorrect default cookie name and recommendation
Action: Upgrade csrf-csrf to 2.2.1 or later.
npm i csrf-csrf@2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-jjmg-x456-w976
- https://github.com/Psifi-Solutions/csrf-csrf/security/advisories/GHSA-jjmg-x456-w976
- https://github.com/Psifi-Solutions/csrf-csrf/commit/8f1ce8db97d945a4bb7f39f0b43c6041fa83d675
- https://github.com/Psifi-Solutions/csrf-csrf
published · modified · JSON