CVE-2021-42648
1 advisory.
npm/code-server CVE-2021-42648: medium 6.1
Cross site scripting in code-server
Action: Upgrade code-server to 3.12.0 or later.
npm i code-server@3.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.12.0 | - |
Fixed versions
| 3.12.0 |
Sources
- osv: GHSA-2gp3-6c9p-jp7w
- https://nvd.nist.gov/vuln/detail/CVE-2021-42648
- https://github.com/cdr/code-server/issues/4355
- https://github.com/coder/code-server/pull/4430
- https://github.com/coder/code-server
CVE-2021-42648 · published · modified · JSON