CVE-2024-40453
1 advisory.
npm/squirrelly CVE-2024-40453: critical 9.8, EPSS 1.13%
squirrelly Code Injection vulnerability
Action: Upgrade squirrelly to 9.1.0 or later.
npm i squirrelly@9.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.1.0 | - |
Fixed versions
| 9.1.0 |
Sources
- osv: GHSA-w5pw-gmcw-rfc8
- https://nvd.nist.gov/vuln/detail/CVE-2024-40453
- https://github.com/squirrellyjs/squirrelly/pull/262
- https://github.com/squirrellyjs/squirrelly/commit/426f930e5ca1501404cd887071e734ec5feb0bcf
- https://github.com/squirrellyjs/squirrelly
- https://samuzora.com/posts/cve-2024-40453
CVE-2024-40453 · published · modified · JSON