npm/twitter-fetcher-js CVE-2018-25058: medium 6.1, EPSS 0.54%

Twitter-Post-Fetcher vulnerable to Use of Web Link to Untrusted Target with window.opener Access

Action: Upgrade twitter-fetcher-js to 18.0.0 or later.

npm i twitter-fetcher-js@18.0.0

Affected

Fixed versions

Sources

• osv: GHSA-m688-cx2p-rgq9
• https://nvd.nist.gov/vuln/detail/CVE-2018-25058
• https://github.com/jasonmayes/Twitter-Post-Fetcher/pull/170
• https://github.com/jasonmayes/Twitter-Post-Fetcher/commit/7d281c6fb5acbc29a2cad295262c1f0c19ca56f3
• https://github.com/jasonmayes/Twitter-Post-Fetcher
• https://github.com/jasonmayes/Twitter-Post-Fetcher/releases/tag/18.0.0
• https://vuldb.com/?ctiid.217017
• https://vuldb.com/?id.217017

CVE-2018-25058 · published 2022-12-29T09:30:19Z · modified 2023-11-08T04:00:15.652844Z · JSON