CVE-2022-38545
1 advisory.
npm/valine CVE-2022-38545: critical 9.6, EPSS 34.13%
Valine code injection vulnerability
Action: Upgrade valine to 1.5.0 or later.
npm i valine@1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-mcvg-g9wx-v5vx
- https://nvd.nist.gov/vuln/detail/CVE-2022-38545
- https://github.com/xCss/Valine/issues/400
- https://github.com/xCss/Valine/commit/c40826c5816c98d797a6b1ed8b62bddf73ed4f65
- https://github.com/xCss/Valine
- https://github.com/xCss/Valine/releases/tag/v1.5.0
CVE-2022-38545 · published · modified · JSON