CVE-2024-14020
1 advisory.
npm/carbone CVE-2024-14020: medium 5, EPSS 0.31%
carbone Code Injection vulnerability
Action: Upgrade carbone to 3.5.6 or later.
npm i carbone@3.5.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.6 | - |
Fixed versions
| 3.5.6 |
Sources
- osv: GHSA-6rcw-ww3x-xqwm
- https://nvd.nist.gov/vuln/detail/CVE-2024-14020
- https://github.com/carboneio/carbone/commit/04f9feb24bfca23567706392f9ad2c53bbe4134e
- https://github.com/carboneio/carbone
- https://github.com/carboneio/carbone/releases/tag/3.5.6
- https://vuldb.com/?ctiid.339503
- https://vuldb.com/?id.339503
CVE-2024-14020 · published · modified · JSON