CVE-2021-37700
1 advisory.
npm/@github/paste-markdown CVE-2021-37700: medium 6.5, EPSS 1.66%
Clipboard-based DOM-XSS
Action: Upgrade @github/paste-markdown to 0.3.4 or later.
npm i @github/paste-markdown@0.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.4 | - |
Fixed versions
| 0.3.4 |
Sources
- osv: GHSA-gpfj-4j6g-c4w9
- https://github.com/github/paste-markdown/security/advisories/GHSA-gpfj-4j6g-c4w9
- https://nvd.nist.gov/vuln/detail/CVE-2021-37700
- https://github.com/github/paste-markdown/commit/32b7ea3f29ae8f256f9d19768387be42678ddf30
- https://github.com/github/paste-markdown
- https://github.com/github/paste-markdown/releases/tag/v0.3.4
- https://www.npmjs.com/package/@github/paste-markdown
CVE-2021-37700 · published · modified · JSON