CVE-2021-4231
1 advisory.
npm/@angular/core CVE-2021-4231: medium 5.4, EPSS 1.18%
Angular vulnerable to Cross-site Scripting
Action: Upgrade @angular/core to 10.2.5 or later.
npm i @angular/core@11.0.5npm i @angular/core@11.1.0-next.3npm i @angular/core@10.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0 | 11.0.5 | - |
| 11.1.0-next.0 | 11.1.0-next.3 | - |
| 0 | 10.2.5 | - |
Fixed versions
| 11.0.5 | 11.1.0-next.3 | 10.2.5 |
Sources
- osv: GHSA-c75v-2vq8-878f
- https://nvd.nist.gov/vuln/detail/CVE-2021-4231
- https://github.com/angular/angular/issues/40136
- https://github.com/angular/angular/commit/0aa220bc0000fc4d1651ec388975bbf5baa1da36
- https://github.com/angular/angular/commit/47d9b6d72dab9d60c96bc1c3604219f6385649ea
- https://github.com/angular/angular/commit/ba8da742e3b243e8f43d4c63aa842b44e14f2b09
- https://github.com/angular/angular
- https://security.snyk.io/vuln/SNYK-JS-ANGULARCORE-1070902
- https://vuldb.com/?id.181356
CVE-2021-4231 · published · modified · JSON