CVE-2024-50611
1 advisory.
npm/@cyclonedx/cdxgen CVE-2024-50611: medium 6.4, EPSS 0.85%
CycloneDX cdxgen may execute code contained within build-related files
Action: Upgrade @cyclonedx/cdxgen to 11.1.7 or later.
npm i @cyclonedx/cdxgen@11.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.1.7 | - |
Fixed versions
| 11.1.7 |
Sources
- osv: GHSA-hxf3-vgpm-fv9p
- https://nvd.nist.gov/vuln/detail/CVE-2024-50611
- https://github.com/CycloneDX/cdxgen/issues/1328
- https://github.com/CycloneDX/cdxgen/pull/1614
- https://github.com/CycloneDX/cdxgen
- https://github.com/CycloneDX/cdxgen/releases
- https://github.com/CycloneDX/cdxgen/releases/tag/v11.1.7
- https://owasp.org/www-project-dep-scan
CVE-2024-50611 · published · modified · JSON