CVE-2024-41677
1 advisory.
npm/@builder.io/qwik CVE-2024-41677: medium 6.3, EPSS 0.50%
Qwik has a potential mXSS vulnerability due to improper HTML escaping
Action: Upgrade @builder.io/qwik to 1.7.3 or later.
npm i @builder.io/qwik@1.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.3 | - |
Fixed versions
| 1.7.3 |
Sources
- osv: GHSA-2rwj-7xq8-4gx4
- https://github.com/QwikDev/qwik/security/advisories/GHSA-2rwj-7xq8-4gx4
- https://nvd.nist.gov/vuln/detail/CVE-2024-41677
- https://github.com/QwikDev/qwik/commit/7e742eb3a1001542d795776c0317d47df8b9d64e
- https://github.com/QwikDev/qwik
- https://github.com/QwikDev/qwik/blob/v1.5.5/packages/qwik/src/core/render/ssr/render-ssr.ts#L1182-L1208
CVE-2024-41677 · published · modified · JSON