CVE-2023-26491
1 advisory.
npm/rsshub CVE-2023-26491: medium 6.1
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Action: Upgrade rsshub to 1.0.0-master.c910c4d or later.
npm i rsshub@1.0.0-master.c910c4dAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-master.c910c4d | - |
Fixed versions
| 1.0.0-master.c910c4d |
Sources
- osv: GHSA-32gr-4cq6-5w5q
- https://github.com/DIYgod/RSSHub/security/advisories/GHSA-32gr-4cq6-5w5q
- https://nvd.nist.gov/vuln/detail/CVE-2023-26491
- https://github.com/DIYgod/RSSHub/commit/c910c4d28717fb860fbe064736641f379fab2c91
- https://github.com/DIYgod/RSSHub
CVE-2023-26491 · published · modified · JSON