CVE-2023-6460
1 advisory.
npm/@google-cloud/firestore CVE-2023-6460: medium 4, EPSS 0.12%
Logging of the firestore key within nodejs-firestore
Action: Upgrade @google-cloud/firestore to 6.1.0 or later.
npm i @google-cloud/firestore@6.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.0 | - |
Fixed versions
| 6.1.0 |
Sources
- osv: GHSA-4g6q-77j7-vvjc
- https://nvd.nist.gov/vuln/detail/CVE-2023-6460
- https://github.com/googleapis/nodejs-firestore/pull/1742
- https://bughunters.google.com/reports/vrp/KNvgo1Wij
- https://github.com/googleapis/nodejs-firestore
- https://github.com/googleapis/nodejs-firestore/releases/tag/v6.1.0
CVE-2023-6460 · published · modified · JSON