CVE-2019-15782
1 advisory.
npm/webtorrent CVE-2019-15782: medium 6.1, EPSS 1.47%
Cross-Site Scripting in webtorrent
Action: Upgrade webtorrent to 0.107.6 or later.
npm i webtorrent@0.107.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.107.6 | - |
Fixed versions
| 0.107.6 |
Sources
- osv: GHSA-gjh4-fcv3-whpq
- https://nvd.nist.gov/vuln/detail/CVE-2019-15782
- https://github.com/webtorrent/webtorrent/pull/1714
- https://github.com/webtorrent/webtorrent/commit/7e829b5d52c32d2e6d8f5fbcf0f8f418fffde083
- https://hackerone.com/reports/681617
- https://github.com/webtorrent/webtorrent/compare/v0.107.5...v0.107.6
- https://snyk.io/vuln/SNYK-JS-WEBTORRENT-460351
- https://www.npmjs.com/advisories/1158
CVE-2019-15782 · published · modified · JSON