CVE-2020-7741
1 advisory.
npm/hellojs CVE-2020-7741: critical 9.9
XSS in hello.js
Action: Upgrade hellojs to 1.18.6 or later.
npm i hellojs@1.18.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.6 | - |
Fixed versions
| 1.18.6 |
Sources
- osv: GHSA-7jh9-6cpf-h4m7
- https://nvd.nist.gov/vuln/detail/CVE-2020-7741
- https://github.com/MrSwitch/hello.js/commit/d6f5137f30de6e0ef7048191ee6ae575fdc2f669
- https://github.com/MrSwitch/hello.js/blob/3b79ec93781b3d7b9c0b56f598e060301d1f3e73/dist/hello.all.js%23L1545
- https://snyk.io/vuln/SNYK-JS-HELLOJS-1014546
CVE-2020-7741 · published · modified · JSON