npm/slim-select CVE-2024-9440: medium 5.4, EPSS 0.36%
Slim Select has potential Cross-site Scripting issue
Action: Upgrade slim-select to 2.9.2 or later.
npm i slim-select@2.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.9.2 | - |
Fixed versions
| 2.9.2 |
Sources
- osv: GHSA-qvqv-mcxr-x8qw
- https://nvd.nist.gov/vuln/detail/CVE-2024-9440
- https://github.com/brianvoe/slim-select/issues/564
- https://github.com/brianvoe/slim-select/pull/572
- https://github.com/brianvoe/slim-select/commit/f8534f27d6e9bab89024d139f1c4f7555f1efd5e
- https://github.com/brianvoe/slim-select
- https://github.com/brianvoe/slim-select/blob/e7e37e2ff90e125f846bd98d6b8f278524ead79e/src/slim-select/select.ts#L377
- https://vulncheck.com/advisories/slim-select-xss
CVE-2024-9440 · published · modified · JSON