CVE-2023-41049
1 advisory.
npm/@dcl/single-sign-on-client CVE-2023-41049: high 7.5
Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client
Action: Upgrade @dcl/single-sign-on-client to 0.1.0 or later.
npm i @dcl/single-sign-on-client@0.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.0 | - |
Fixed versions
| 0.1.0 |
Sources
- osv: GHSA-vp4f-wxgw-7x8x
- https://github.com/decentraland/single-sign-on-client/security/advisories/GHSA-vp4f-wxgw-7x8x
- https://nvd.nist.gov/vuln/detail/CVE-2023-41049
- https://github.com/decentraland/single-sign-on-client/pull/2
- https://github.com/decentraland/single-sign-on-client/commit/bd20ea9533d0cda30809d929db85b1b76cef855a
- https://github.com/decentraland/single-sign-on-client
CVE-2023-41049 · published · modified · JSON