CVE-2024-53847
1 advisory.
npm/trix CVE-2024-53847: medium 5.1
Trix editor subject to XSS vulnerabilities on copy & paste
Action: Upgrade trix to 1.3.3 or later.
npm i trix@2.1.9npm i trix@1.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.9 | - |
| 1.0.0 | 1.3.3 | - |
Fixed versions
| 2.1.9 | 1.3.3 |
Sources
- osv: GHSA-6vx4-v2jw-qwqh
- nvd: CVE-2024-53847
- https://github.com/basecamp/trix/security/advisories/GHSA-6vx4-v2jw-qwqh
- https://github.com/basecamp/trix/commit/272c7e27e722608732a67108ad3fe7870e233ac8
- https://github.com/basecamp/trix
CVE-2024-53847 · published · modified · JSON