CVE-2019-12313
1 advisory.
npm/shave CVE-2019-12313: medium 6.1, EPSS 1.26%
Cross-Site Scripting in shave
Action: Upgrade shave to 2.5.3 or later.
npm i shave@2.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.3 | - |
Fixed versions
| 2.5.3 |
Sources
- osv: GHSA-gh4g-3gm9-5wrq
- https://nvd.nist.gov/vuln/detail/CVE-2019-12313
- https://github.com/dollarshaveclub/shave/commit/da7371b0531ba14eae48ef1bb1456a3de4cfa954#diff-074799b511e4b61923dfd3f2a3bf9b54R67
- https://github.com/dollarshaveclub/shave/compare/852b537...da7371b
- https://www.npmjs.com/advisories/822
CVE-2019-12313 · published · modified · JSON