CVE-2022-39382
1 advisory.
npm/@keystone-6/core CVE-2022-39382: critical 9.8
@keystone-6/core's NODE_ENV defaults to development with esbuild
Action: Upgrade @keystone-6/core to 3.0.2 or later.
npm i @keystone-6/core@3.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.2 | - |
Fixed versions
| 3.0.2 |
Sources
- osv: GHSA-25mx-2mxm-6343
- https://github.com/keystonejs/keystone/security/advisories/GHSA-25mx-2mxm-6343
- https://nvd.nist.gov/vuln/detail/CVE-2022-39382
- https://github.com/keystonejs/keystone/pull/8031
- https://github.com/keystonejs/keystone/pull/8063
- https://github.com/keystonejs/keystone
CVE-2022-39382 · published · modified · JSON