npm/webpack-bundle-analyzer: medium 6.3
Cross-Site Scripting in webpack-bundle-analyzer
Action: Upgrade webpack-bundle-analyzer to 3.3.2 or later.
npm i webpack-bundle-analyzer@3.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3.2 | - |
Fixed versions
| 3.3.2 |
Sources
- osv: GHSA-pgr8-jg6h-8gw6
- https://github.com/webpack-contrib/webpack-bundle-analyzer/issues/263
- https://github.com/webpack-contrib/webpack-bundle-analyzer/pull/264
- https://github.com/webpack-contrib/webpack-bundle-analyzer/commit/20f2b4c553ee343f491faf63e39427fba9908c7c
- https://snyk.io/vuln/SNYK-JS-WEBPACKBUNDLEANALYZER-174190
- https://www.npmjs.com/advisories/826
published · modified · JSON