CVE-2022-24762
1 advisory.
npm/sysend CVE-2022-24762: medium 6.5
Leaking of user information on Cross-Domain communication in sysend
Action: Upgrade sysend to 1.10.0 or later.
npm i sysend@1.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.0 | - |
Fixed versions
| 1.10.0 |
Sources
- osv: GHSA-4vvg-x86p-mvqc
- https://github.com/jcubic/sysend.js/security/advisories/GHSA-4vvg-x86p-mvqc
- https://nvd.nist.gov/vuln/detail/CVE-2022-24762
- https://github.com/jcubic/sysend.js/issues/33
- https://github.com/jcubic/sysend.js/commit/a24f4b776fb18191ae0f7e3d90c2c7bec459431a
- https://github.com/jcubic/sysend.js
- https://github.com/jcubic/sysend.js/releases/tag/1.10.0
CVE-2022-24762 · published · modified · JSON