CVE-2023-22493
1 advisory.
npm/rsshub CVE-2023-22493: high 8.8, EPSS 0.78%
RSSHub SSRF vulnerability
Action: Upgrade rsshub to 1.0.0-master.a66cbcf or later.
npm i rsshub@1.0.0-master.a66cbcfAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-master.a66cbcf | - |
Fixed versions
| 1.0.0-master.a66cbcf |
Sources
- osv: GHSA-64wp-jh9p-5cg2
- https://github.com/DIYgod/RSSHub/security/advisories/GHSA-64wp-jh9p-5cg2
- https://nvd.nist.gov/vuln/detail/CVE-2023-22493
- https://github.com/DIYgod/RSSHub/pull/11588
- https://github.com/DIYgod/RSSHub/commit/a66cbcf6eebc700bf97ab097f404f16ab415506a
- https://advisory.dw1.io/56
- https://github.com/DIYgod/RSSHub
CVE-2023-22493 · published · modified · JSON