npm/mxgraph CVE-2019-13127: medium 6.1, EPSS 1.50%
mxGraph vulnerable to cross-site scripting in color field
Action: Upgrade mxgraph to 4.0.1 or later.
npm i mxgraph@4.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.1 | - |
Fixed versions
| 4.0.1 |
Sources
- osv: GHSA-xm59-jvxm-cp3v
- https://nvd.nist.gov/vuln/detail/CVE-2019-13127
- https://github.com/jgraph/mxgraph/commit/76e8e2809b622659a9c5ffdc4f19922b7a68cfa3
- https://marketplace.atlassian.com/apps/1210933/draw-io-diagrams-for-confluence/version-history
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-032.txt
CVE-2019-13127 · published · modified · JSON