npm/polaris-website: medium 6.8
CSRF Vulnerability in polaris-website
Action: Upgrade polaris-website to 1.1.1 or later.
npm i polaris-website@1.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.1 | - |
Fixed versions
| 1.1.1 |
Sources
- osv: GHSA-whrh-9j4q-g7ph
- https://github.com/polaris-rbx/Polaris-React/security/advisories/GHSA-whrh-9j4q-g7ph
- https://github.com/polaris-rbx/Polaris-React/commit/b64673d91e83c0737616a0770d8208727730808b
- https://github.com/polaris-rbx/Polaris-React
- https://medium.com/cross-site-request-forgery-csrf/double-submit-cookie-pattern-65bb71d80d9f
- https://owasp.org/www-community/attacks/csrf
- https://snyk.io/vuln/SNYK-JS-POLARISWEBSITE-597473
- https://www.barracuda.com/glossary/csrf
published · modified · JSON