npm/firebase-tools CVE-2024-4128: low 2.6, EPSS 0.13%
Firebase vulnerable to CRSF attack
Action: Upgrade firebase-tools to 13.6.0 or later.
npm i firebase-tools@13.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 13.6.0 | - |
Fixed versions
| 13.6.0 |
Sources
- osv: GHSA-rcm2-22f3-pqv3
- https://nvd.nist.gov/vuln/detail/CVE-2024-4128
- https://github.com/firebase/firebase-tools/pull/6944
- https://github.com/firebase/firebase-tools/commit/068a2b08dc308c7ab4b569617f5fc8821237e3a0
- https://github.com/firebase/firebase-tools
CVE-2024-4128 · published · modified · JSON