CVE-2021-31712
1 advisory.
npm/react-draft-wysiwyg CVE-2021-31712: medium 5.4
Cross-site Scripting in React Draft Wysiwyg
Action: Upgrade react-draft-wysiwyg to 1.14.6 or later.
npm i react-draft-wysiwyg@1.14.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.6 | - |
Fixed versions
| 1.14.6 |
Sources
- osv: GHSA-qcg2-h349-vwm3
- https://nvd.nist.gov/vuln/detail/CVE-2021-31712
- https://github.com/jpuri/react-draft-wysiwyg/issues/1102
- https://github.com/jpuri/react-draft-wysiwyg/pull/1104
- https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380
CVE-2021-31712 · published · modified · JSON