npm/oauth2orize-fprm CVE-2018-11647: medium 6.1, EPSS 0.91%
oauth2orize-fprm XSS vulnerability
Action: Upgrade oauth2orize-fprm to 0.2.1 or later.
npm i oauth2orize-fprm@0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-p77r-c6m3-gj2r
- https://nvd.nist.gov/vuln/detail/CVE-2018-11647
- https://github.com/jaredhanson/oauth2orize-fprm/commit/2bf9faee787eb004abbdfb6f4cc2fb06653defd5
- https://github.com/jaredhanson/oauth2orize-fprm/blob/master/SECURITY-NOTICE.md
CVE-2018-11647 · published · modified · JSON