CVE-2022-29172
1 advisory.
npm/auth0-lock CVE-2022-29172: medium 6.1, EPSS 0.62%
Cross-site Scripting in Auth0 Lock
Action: Upgrade auth0-lock to 11.33.0 or later.
npm i auth0-lock@11.33.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.33.0 | - |
Fixed versions
| 11.33.0 |
Sources
- osv: GHSA-7ww6-75fj-jcj7
- https://github.com/auth0/lock/security/advisories/GHSA-7ww6-75fj-jcj7
- https://nvd.nist.gov/vuln/detail/CVE-2022-29172
- https://github.com/auth0/lock/commit/79ae557d331274b114848150f19832ae341771b1
- https://github.com/auth0/lock
CVE-2022-29172 · published · modified · JSON