CVE-2025-67438
1 advisory.
npm/@sync-in/server CVE-2025-67438: medium
Sync-in Server has a stored cross-site scripting (XSS) vulnerability
Action: Upgrade @sync-in/server to 1.9.3 or later.
npm i @sync-in/server@1.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.3 | - |
Fixed versions
| 1.9.3 |
Sources
- osv: GHSA-9jmq-xgjm-p8c2
- https://nvd.nist.gov/vuln/detail/CVE-2025-67438
- https://github.com/Sync-in/server/commit/a6276d067725637310e4e83a3eee337aae81f439
- https://gist.github.com/x0root/86db30af91bb0e1707eb7e57a049b6ad
- https://github.com/Sync-in/server
- https://github.com/Sync-in/server/releases/tag/v1.9.3
CVE-2025-67438 · published · modified · JSON