npm/anchorme CVE-2021-23411: medium 5.4, EPSS 1.16%
Cross-site scripting in anchorme
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.1.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w4wq-rvmq-77x7
- https://nvd.nist.gov/vuln/detail/CVE-2021-23411
- https://github.com/alexcorvi/anchorme.js/blob/gh-pages/src/transform.ts#23L81
- https://github.com/alexcorvi/anchorme.js/blob/gh-pages/src/transform.ts%23L81
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1320695
- https://snyk.io/vuln/SNYK-JS-ANCHORME-1311008
CVE-2021-23411 · published · modified · JSON