CVE-2021-41246
1 advisory.
npm/express-openid-connect CVE-2021-41246: medium 4.6
Session fixation in express-openid-connect
Action: Upgrade express-openid-connect to 2.5.2 or later.
npm i express-openid-connect@2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 2.5.2 | - |
Fixed versions
| 2.5.2 |
Sources
- osv: GHSA-7rg2-qxmf-hhx9
- https://github.com/auth0/express-openid-connect/security/advisories/GHSA-7rg2-qxmf-hhx9
- https://nvd.nist.gov/vuln/detail/CVE-2021-41246
- https://github.com/auth0/express-openid-connect/commit/5ab67ff2bd84f76674066b5e129b43ab5f2f430f
- https://github.com/auth0/express-openid-connect
- https://github.com/auth0/express-openid-connect/releases/tag/v2.5.2
CVE-2021-41246 · published · modified · JSON