CVE-2021-32641
1 advisory.
npm/auth0-lock CVE-2021-32641: high 8.1
Reflected XSS when using flashMessages or languageDictionary
Action: Upgrade auth0-lock to 11.30.1 or later.
npm i auth0-lock@11.30.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.30.1 | - |
Fixed versions
| 11.30.1 |
Sources
- osv: GHSA-jr3j-whm4-9wwm
- https://github.com/auth0/lock/security/advisories/GHSA-jr3j-whm4-9wwm
- https://nvd.nist.gov/vuln/detail/CVE-2021-32641
- https://github.com/auth0/lock/commit/d139cf01c8234b07caf265e051f39d3eab08f7ed
- https://github.com/auth0/lock/releases/tag/v11.30.1
CVE-2021-32641 · published · modified · JSON