CVE-2021-21316
1 advisory.
npm/less-openui5 CVE-2021-21316: medium 6.3, EPSS 0.99%
Processing untrusted theming resources might execute arbitrary code (ACE)
Action: Upgrade less-openui5 to 0.10.0 or later.
npm i less-openui5@0.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0 | - |
Fixed versions
| 0.10.0 |
Sources
- osv: GHSA-3crj-w4f5-gwh4
- https://github.com/SAP/less-openui5/security/advisories/GHSA-3crj-w4f5-gwh4
- https://nvd.nist.gov/vuln/detail/CVE-2021-21316
- https://github.com/SAP/less-openui5/commit/c0d3a8572974a20ea6cee42da11c614a54f100e8
- https://github.com/SAP/less-openui5/releases/tag/v0.10.0
- https://www.npmjs.com/package/less-openui5
- http://lesscss.org/usage/#less-options-enable-inline-javascript-deprecated-
CVE-2021-21316 · published · modified · JSON