CVE-2020-7642
1 advisory.
npm/lazysizes CVE-2020-7642: medium 5.4, EPSS 0.89%
Cross-site scripting in lazysizes
Action: Upgrade lazysizes to 5.2.1 or later.
npm i lazysizes@5.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.1 | - |
Fixed versions
| 5.2.1 |
Sources
- osv: GHSA-hg2p-2cvq-4ppv
- https://nvd.nist.gov/vuln/detail/CVE-2020-7642
- https://github.com/aFarkas/lazysizes/commit/3720ab8262552d4e063a38d8492f9490a231fd48
- https://snyk.io/vuln/SNYK-JS-LAZYSIZES-567144
CVE-2020-7642 · published · modified · JSON