CVE-2020-28487
1 advisory.
npm/vis-timeline CVE-2020-28487: medium 6.8, EPSS 1.46%
Cross-site Scripting in vis-timeline
Action: Upgrade vis-timeline to 7.4.4 or later.
npm i vis-timeline@7.4.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.4.4 | - |
Fixed versions
| 7.4.4 |
Sources
- osv: GHSA-9mrv-456v-pf22
- https://nvd.nist.gov/vuln/detail/CVE-2020-28487
- https://github.com/visjs/vis-timeline/issues/838
- https://github.com/visjs/vis-timeline/pull/840
- https://github.com/visjs/vis-timeline/commit/a7ca349c7b3b6080efd05776ac77bb27176d4d3f
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBVISJS-1063502
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1063501
- https://snyk.io/vuln/SNYK-JS-VISTIMELINE-1063500
CVE-2020-28487 · published · modified · JSON