npm/@asymmetric-effort/specifyjs: medium
@asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)
Action: Upgrade @asymmetric-effort/specifyjs to 0.2.136 or later.
npm i @asymmetric-effort/specifyjs@0.2.136Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.136 | - |
Fixed versions
| 0.2.136 |
Sources
- osv: GHSA-xw57-23p8-9wc5
- https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-xw57-23p8-9wc5
- https://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a
- https://github.com/asymmetric-effort/specifyjs/commit/293124c51bf797c0f5cdae32981110545850a893
- https://github.com/asymmetric-effort/specifyjs
published · modified · JSON