CVE-2019-5786
1 advisory.
npm/puppeteer CVE-2019-5786: medium 6.5, exploited, EPSS 61.09%
Use-After-Free in puppeteer
Action: Upgrade puppeteer to 1.13.0 or later.
npm i puppeteer@1.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.0 | - |
Fixed versions
| 1.13.0 |
Sources
- osv: GHSA-c2gp-86p4-5935
- kev: CVE-2019-5786
- https://nvd.nist.gov/vuln/detail/CVE-2019-5786
- https://github.com/GoogleChrome/puppeteer/issues/4141
- https://blog.exodusintel.com/2019/03/20/cve-2019-5786-analysis-and-exploitation
- https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html
- https://crbug.com/936448
- https://github.com/GoogleChrome/puppeteer
- https://snyk.io/vuln/SNYK-JS-PUPPETEER-174321
- https://www.npmjs.com/advisories/824
CVE-2019-5786 · published · modified · JSON