CVE-2018-1000086
1 advisory.
npm/pym.js CVE-2018-1000086: high 8.8
pym.js CSRF Vulnerability
Action: Upgrade pym.js to 1.3.2 or later.
npm i pym.js@1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.2 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-82gw-pqf7-q3j2
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000086
- https://github.com/nprapps/pym.js/issues/170
- https://github.com/nprapps/pym.js/commit/c3552a6cf2532664c17bd6a318fb3cf8e4cf2f97
- https://github.com/advisories/GHSA-82gw-pqf7-q3j2
- https://github.com/nprapps/pym.js
- http://blog.apps.npr.org/2018/02/15/pym-security-vulnerability.html
CVE-2018-1000086 · published · modified · JSON