npm/react-draft-wysiwyg CVE-2021-31712: medium 5.4, EPSS 0.79%

Cross-site Scripting in React Draft Wysiwyg

Action: Upgrade react-draft-wysiwyg to 1.14.6 or later.

npm i react-draft-wysiwyg@1.14.6

Affected

Fixed versions

Sources

• osv: GHSA-qcg2-h349-vwm3
• https://nvd.nist.gov/vuln/detail/CVE-2021-31712
• https://github.com/jpuri/react-draft-wysiwyg/issues/1102
• https://github.com/jpuri/react-draft-wysiwyg/pull/1104
• https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380

CVE-2021-31712 · published 2021-05-06T15:52:35Z · modified 2023-11-08T04:05:50.480506Z · JSON