CVE-2024-27926
1 advisory.
npm/rsshub CVE-2024-27926: medium 6.1
RSSHub Cross-site Scripting vulnerability caused by internal media proxy
Action: Upgrade rsshub to 1.0.0-master.d8ca915 or later.
npm i rsshub@1.0.0-master.d8ca915Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0-master.cbbd829 | 1.0.0-master.d8ca915 | - |
Fixed versions
| 1.0.0-master.d8ca915 |
Sources
- osv: GHSA-2wqw-hr4f-xrhh
- https://github.com/DIYgod/RSSHub/security/advisories/GHSA-2wqw-hr4f-xrhh
- https://nvd.nist.gov/vuln/detail/CVE-2024-27926
- https://github.com/DIYgod/RSSHub/commit/4d3e5d79c1c17837e931b4cd253d2013b487aa87
- https://github.com/DIYgod/RSSHub
CVE-2024-27926 · published · modified · JSON