CVE-2020-7749
1 advisory.
npm/osm-static-maps CVE-2020-7749: high 7.6, EPSS 1.60%
Injection and Cross-site Scripting in osm-static-maps
Action: Upgrade osm-static-maps to 3.9.0 or later.
npm i osm-static-maps@3.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.9.0 | - |
Fixed versions
| 3.9.0 |
Sources
- osv: GHSA-pxcf-v868-m492
- https://nvd.nist.gov/vuln/detail/CVE-2020-7749
- https://github.com/jperelli/osm-static-maps/pull/24
- https://github.com/jperelli/osm-static-maps/commit/97355d29e08753d1cfe99b1281dbaa06f4e651b0
- https://github.com/jperelli/osm-static-maps/blob/master/src/template.html%23L142
- https://snyk.io/vuln/SNYK-JS-OSMSTATICMAPS-609637
CVE-2020-7749 · published · modified · JSON