npm/canvas: medium
Denial of Service in canvas
Action: Upgrade canvas to 1.6.10 or later.
npm i canvas@1.6.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.10 | - |
Fixed versions
| 1.6.10 |
Sources
- osv: GHSA-vpq5-4rc8-c222
- https://github.com/Automattic/node-canvas/commit/c3e4ccb1c404da01e83fe5eb3626bf55f7f55957
- https://hackerone.com/reports/315037
- https://www.npmjs.com/advisories/804
published · modified · JSON