CVE-2020-8176
1 advisory.
npm/@shopify/koa-shopify-auth CVE-2020-8176: medium 6.1
Cross-site scripting in @shopify/koa-shopify-auth
Action: Upgrade @shopify/koa-shopify-auth to 3.1.63 or later.
npm i @shopify/koa-shopify-auth@3.1.63Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.61 | 3.1.63 | - |
Fixed versions
| 3.1.63 |
Sources
- osv: GHSA-jqh7-w5pr-cr56
- https://nvd.nist.gov/vuln/detail/CVE-2020-8176
- https://github.com/Shopify/quilt/pull/1455
- https://hackerone.com/reports/881409
CVE-2020-8176 · published · modified · JSON