npm/@saltcorn/cli: high 8.7
Unsafe plugins can be installed via pack import by tenant admins
Action: Upgrade @saltcorn/cli to 0.8.8-beta.2 or later.
npm i @saltcorn/cli@0.8.8-beta.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.8-beta.2 | - |
Fixed versions
| 0.8.8-beta.2 |
Sources
- osv: GHSA-wxf3-4fvj-vqqx
- https://github.com/saltcorn/saltcorn/security/advisories/GHSA-wxf3-4fvj-vqqx
- https://github.com/saltcorn/saltcorn/pull/1973
- https://github.com/saltcorn/saltcorn/commit/0f32a51277a635c814a634bda9b6d358fb8c04ab
- https://github.com/saltcorn/saltcorn
- https://github.com/saltcorn/saltcorn/blob/99fe277e497fd193bb070acd8c663aa254a9907c/packages/server/load_plugins.js#L191
published · modified · JSON