CVE-2021-30074
1 advisory.
npm/docsify CVE-2021-30074: medium 6.1, EPSS 0.78%
Docsify vulnerable to cross-site scripting due to mishandled encoding
Action: Upgrade docsify to 4.12.2 or later.
npm i docsify@4.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.12.2 | - |
Fixed versions
| 4.12.2 |
Sources
- osv: GHSA-5h7x-68wj-jhwc
- https://nvd.nist.gov/vuln/detail/CVE-2021-30074
- https://github.com/docsifyjs/docsify/issues/1549
- https://github.com/docsifyjs/docsify/pull/1551
- https://github.com/docsifyjs/docsify/commit/c24f7f6f0b87a87f6dd3755f69eb0969ebb029c9
- https://github.com/docsifyjs/docsify
CVE-2021-30074 · published · modified · JSON