CVE-2020-28482
1 advisory.
npm/fastify-csrf CVE-2020-28482: high 8.8
Cross-site Request Forgery in fastify-csrf
Action: Upgrade fastify-csrf to 3.0.0 or later.
npm i fastify-csrf@3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-49wp-qq6x-g2rf
- https://nvd.nist.gov/vuln/detail/CVE-2020-28482
- https://github.com/fastify/fastify-csrf/pull/26
- https://github.com/fastify/fastify-csrf/commit/3c9de36e9e73ce0eda9207f84f2ac0243e1f5253
- https://github.com/fastify/fastify-csrf
- https://snyk.io/vuln/SNYK-JS-FASTIFYCSRF-1062044
- https://www.npmjs.com/package/fastify-csrf
CVE-2020-28482 · published · modified · JSON