npm/materialize-css CVE-2019-11004: medium 6.1, EPSS 0.79%

Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-rg3q-jxmp-pvjj
• https://nvd.nist.gov/vuln/detail/CVE-2019-11004
• https://github.com/Dogfalo/materialize/issues/6286
• https://github.com/Dogfalo/materialize/issues/6331#issuecomment-549080183
• https://github.com/materializecss/materialize/pull/49
• https://github.com/samschurter/materialize/commit/3aae4cc9bb2b58c337bf25d2f04f129a2a0fa78f
• https://github.com/Dogfalo/materialize
• https://github.com/advisories/GHSA-rg3q-jxmp-pvjj

CVE-2019-11004 · published 2019-04-09T19:44:37Z · modified 2023-11-08T04:00:59.190806Z · JSON