CVE-2024-34345
1 advisory.
npm/@cyclonedx/cyclonedx-library CVE-2024-34345: high 8.1
@cyclonedx/cyclonedx-library Improper Restriction of XML External Entity Reference vulnerability
Action: Upgrade @cyclonedx/cyclonedx-library to 6.7.1 or later.
npm i @cyclonedx/cyclonedx-library@6.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.7.0 | 6.7.1 | - |
Fixed versions
| 6.7.1 |
Sources
- osv: GHSA-38gf-rh2w-gmj7
- https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
- https://nvd.nist.gov/vuln/detail/CVE-2024-34345
- https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1063
- https://github.com/CycloneDX/cyclonedx-javascript-library/commit/5e5e1e0b9422f47d2de81c7c4064b803a01e7203
- https://github.com/CycloneDX/cyclonedx-javascript-library
CVE-2024-34345 · published · modified · JSON