CVE-2022-39350

npm/@dependencytrack/frontend CVE-2022-39350: medium 5.4, EPSS 0.88%

@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details

Action: Upgrade @dependencytrack/frontend to 4.6.1 or later.

npm i @dependencytrack/frontend@4.6.1

Affected

Fixed versions

Sources

• osv: GHSA-c33w-pm52-mqvf
• https://github.com/DependencyTrack/frontend/security/advisories/GHSA-c33w-pm52-mqvf
• https://nvd.nist.gov/vuln/detail/CVE-2022-39350
• https://docs.dependencytrack.org/changelog
• https://github.com/DependencyTrack/frontend
• https://github.com/showdownjs/showdown/wiki/Markdown's-XSS-Vulnerability-(and-how-to-mitigate-it)

CVE-2022-39350 · published 2022-10-25T20:22:01Z · modified 2023-11-08T04:10:19.556781Z · JSON