CVE-2025-68457
1 advisory.
npm/orejime CVE-2025-68457: medium 6.1
Orejime has executable code in HTML attributes
Action: Upgrade orejime to 2.3.2 or later.
npm i orejime@2.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.2 | - |
Fixed versions
| 2.3.2 |
Sources
- osv: GHSA-72mh-hgpm-6384
- https://github.com/boscop-fr/orejime/security/advisories/GHSA-72mh-hgpm-6384
- https://nvd.nist.gov/vuln/detail/CVE-2025-68457
- https://github.com/boscop-fr/orejime/issues/142
- https://github.com/boscop-fr/orejime/pull/143
- https://github.com/boscop-fr/orejime
CVE-2025-68457 · published · modified · JSON