CVE-2023-40013
1 advisory.
npm/external-svg-loader CVE-2023-40013: critical 9.8, EPSS 0.56%
external-svg-loader Cross-site Scripting vulnerability
Action: Upgrade external-svg-loader to 1.6.9 or later.
npm i external-svg-loader@1.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.9 | - |
Fixed versions
| 1.6.9 |
Sources
- osv: GHSA-xc2r-jf2x-gjr8
- https://github.com/shubhamjain/svg-loader/security/advisories/GHSA-xc2r-jf2x-gjr8
- https://nvd.nist.gov/vuln/detail/CVE-2023-40013
- https://github.com/shubhamjain/svg-loader/commit/d3562fc08497aec5f33eb82017fa1417b3319e2c
- https://github.com/shubhamjain/svg-loader
- https://github.com/shubhamjain/svg-loader/blob/main/svg-loader.js#L125-L128
- https://github.com/shubhamjain/svg-loader/tree/main#2-enable-javascript
CVE-2023-40013 · published · modified · JSON