CVE-2021-25978

npm/apostrophe CVE-2021-25978: medium 5.4, EPSS 0.50%

Cross-site Scripting in apostrophe

Action: Upgrade apostrophe to 3.4.0 or later.

npm i apostrophe@3.4.0

Affected

Fixed versions

Sources

• osv: GHSA-4r9c-jghc-cx5m
• https://nvd.nist.gov/vuln/detail/CVE-2021-25978
• https://github.com/apostrophecms/apostrophe/commit/c8b94ee9c79468f1ce28e31966cb0e0839165e59
• https://github.com/apostrophecms/apostrophe

CVE-2021-25978 · published 2021-11-10T16:45:34Z · modified 2023-11-08T04:05:19.675346Z · JSON