CVE-2023-2142
1 advisory.
npm/nunjucks CVE-2023-2142: medium 6.1
Nunjucks autoescape bypass leads to cross site scripting
Action: Upgrade nunjucks to 3.2.4 or later.
npm i nunjucks@3.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.4 | - |
Fixed versions
| 3.2.4 |
Sources
- osv: GHSA-x77j-w7wf-fjmw
- https://github.com/mozilla/nunjucks/security/advisories/GHSA-x77j-w7wf-fjmw
- https://nvd.nist.gov/vuln/detail/CVE-2023-2142
- https://github.com/mozilla/nunjucks/pull/1437
- https://github.com/mozilla/nunjucks/commit/ec16d210e7e13f862eccdb0bc9af9f60ff6749d6
- https://bugzilla.mozilla.org/show_bug.cgi?id=1825980
- https://github.com/mozilla/nunjucks
- https://github.com/mozilla/nunjucks/releases/tag/v3.2.4
CVE-2023-2142 · published · modified · JSON