tocsin

CVE-2023-22491

1 advisory.

npm/gatsby-transformer-remark CVE-2023-22491: high 8.1, EPSS 0.61%

gatsby-transformer-remark has possible unsanitized JavaScript code injection

Action: Upgrade gatsby-transformer-remark to 5.25.1 or later.

npm i gatsby-transformer-remark@6.3.2
npm i gatsby-transformer-remark@5.25.1

Affected

introducedfixedlast affected
6.0.06.3.2-
05.25.1-

Fixed versions

6.3.25.25.1

Sources

CVE-2023-22491 · published · modified · JSON