npm/@materializecss/materialize CVE-2019-11004: medium 6.1, EPSS 0.79%

Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation

Action: Upgrade @materializecss/materialize to 1.1.0-alpha or later.

npm i @materializecss/materialize@1.1.0-alpha

Affected

Fixed versions

Sources

• osv: GHSA-rg3q-jxmp-pvjj#npm/@materializecss/materialize
• https://nvd.nist.gov/vuln/detail/CVE-2019-11004
• https://github.com/Dogfalo/materialize/issues/6286
• https://github.com/Dogfalo/materialize/issues/6331#issuecomment-549080183
• https://github.com/materializecss/materialize/pull/49
• https://github.com/samschurter/materialize/commit/3aae4cc9bb2b58c337bf25d2f04f129a2a0fa78f
• https://github.com/Dogfalo/materialize
• https://github.com/advisories/GHSA-rg3q-jxmp-pvjj

CVE-2019-11004 · published 2019-04-09T19:44:37Z · modified 2023-11-08T04:00:59.190806Z · JSON