CVE-2021-25987
1 advisory.
npm/hexo CVE-2021-25987: medium 4.6, EPSS 0.34%
Hexo Vulnerable to XSS
Action: Upgrade hexo to 6.0.0 or later.
npm i hexo@6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-q54r-r9pr-w7qv
- https://nvd.nist.gov/vuln/detail/CVE-2021-25987
- https://github.com/hexojs/hexo/issues/4838
- https://github.com/hexojs/hexo/pull/4750
- https://github.com/hexojs/hexo/commit/5170df2d3fa9c69e855c4b7c2b084ebfd92d5200
- https://github.com/hexojs/hexo
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25987
CVE-2021-25987 · published · modified · JSON