CVE-2022-23474
1 advisory.
npm/@editorjs/editorjs CVE-2022-23474: medium 6.1
Editor.js vulnerable to Code Injection
Action: Upgrade @editorjs/editorjs to 2.26.0 or later.
npm i @editorjs/editorjs@2.26.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26.0 | - |
Fixed versions
| 2.26.0 |
Sources
- osv: GHSA-6mvj-2569-3mcm
- https://nvd.nist.gov/vuln/detail/CVE-2022-23474
- https://github.com/codex-team/editor.js/pull/2100
- https://github.com/codex-team/editor.js/commit/f659015be6de8e6f0c322c5ff4d1a4532d2f29a2
- https://github.com/codex-team/editor.js
- https://securitylab.github.com/advisories
- https://securitylab.github.com/advisories/GHSL-2022-028_codex-team_editor_js
CVE-2022-23474 · published · modified · JSON