npm/lazysizes: high
Cross-Site Scripting in lazysizes
Action: Upgrade lazysizes to 5.2.1-rc1 or later.
npm i lazysizes@5.2.1-rc1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.1-rc1 | - |
Fixed versions
| 5.2.1-rc1 |
Sources
- osv: GHSA-w4vp-3mq7-7v82
- https://github.com/aFarkas/lazysizes/issues/764
- https://www.npmjs.com/advisories/1493
published · modified · JSON