CVE-2021-23416

npm/curly-bracket-parser CVE-2021-23416: medium 5.4, EPSS 0.79%

Cross-site Scripting in curly-bracket-parser

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-rqf8-8c89-mw29
• https://nvd.nist.gov/vuln/detail/CVE-2021-23416
• https://github.com/magynhard/curly-bracket-parser
• https://github.com/magynhard/curly-bracket-parser/blob/master/src/curly-bracket-parser/curly-bracket-parser.js#23L31
• https://github.com/magynhard/curly-bracket-parser/blob/master/src/curly-bracket-parser/curly-bracket-parser.js%23L31
• https://snyk.io/vuln/SNYK-JS-CURLYBRACKETPARSER-1297106

CVE-2021-23416 · published 2021-08-10T16:08:16Z · modified 2023-11-08T04:05:08.374410Z · JSON