CVE-2023-38704
1 advisory.
npm/import-in-the-middle CVE-2023-38704: high 8.1, EPSS 1.00%
import-in-the-middle has unsanitized user controlled input in module generation
Action: Upgrade import-in-the-middle to 1.4.2 or later.
npm i import-in-the-middle@1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: GHSA-5r27-rw8r-7967
- https://github.com/DataDog/import-in-the-middle/security/advisories/GHSA-5r27-rw8r-7967
- https://nvd.nist.gov/vuln/detail/CVE-2023-38704
- https://github.com/DataDog/import-in-the-middle/commit/2531cdd9d1d73f9eaa87c16967f60cb276c1971b
- https://github.com/DataDog/import-in-the-middle
CVE-2023-38704 · published · modified · JSON