CVE-2025-31128
2 advisories.
npm/gifplayer CVE-2025-31128: medium, EPSS 0.48%
gifplayer XSS vulnerability
Action: Upgrade gifplayer to 0.3.7 or later.
npm i gifplayer@0.3.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.7 | - |
Fixed versions
| 0.3.7 |
Sources
- osv: GHSA-gr7w-hmch-25g7
- https://github.com/rubentd/gifplayer/security/advisories/GHSA-gr7w-hmch-25g7
- https://nvd.nist.gov/vuln/detail/CVE-2025-31128
- https://github.com/rubentd/gifplayer/commit/2966193d4d066e5a6ba09dbdf1e1c7f8238630c8
- https://github.com/rubentd/gifplayer
CVE-2025-31128 · published · modified · JSON
Packagist/drupal/gifplayer CVE-2025-31128: unknown, EPSS 0.48%
Gif Player Field creates a simple file field types that allows you to upload the GIF files and configure the output for this using the Field Formatters.
Action: Upgrade drupal/gifplayer to 1.5.0 or later.
composer require drupal/gifplayer:1.5.0composer require drupal/gifplayer:2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
| 2.0.1 | 2.0.4 | - |
Fixed versions
| 1.5.0 | 2.0.4 |
Sources
CVE-2025-31128 · published · modified · JSON