CVE-2021-23342
1 advisory.
npm/docsify CVE-2021-23342: medium 6.1, EPSS 1.66%
Docsify XSS Vulnerability
Action: Upgrade docsify to 4.12.0 or later.
npm i docsify@4.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.12.0 | - |
Fixed versions
| 4.12.0 |
Sources
- osv: GHSA-2mm9-c2fx-c7m4
- https://nvd.nist.gov/vuln/detail/CVE-2021-23342
- https://github.com/docsifyjs/docsify/commit/ff2a66f12752471277fe81a64ad6c4b2c08111fe
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076593
- https://snyk.io/vuln/SNYK-JS-DOCSIFY-1066017
- https://www.npmjs.com/package/docsify
- http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2021/Feb/71
CVE-2021-23342 · published · modified · JSON