npm/hfs: low
HFS user adding a "web link" in HFS is vulnerable to "target=_blank" exploit
Action: Upgrade hfs to 0.57.10 or later.
npm i hfs@0.57.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.57.10 | - |
Fixed versions
| 0.57.10 |
Sources
- osv: GHSA-xcxh-6cv4-q8p8
- https://github.com/rejetto/hfs/security/advisories/GHSA-xcxh-6cv4-q8p8
- https://github.com/rejetto/hfs/commit/6531bcd2ab285af88f91831e30d8a03f5b9fe20d
- https://github.com/rejetto/hfs
published · modified · JSON