Skip to content
OpenAdvisories

Package · npm

gatsby-source-wordpress

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2021-32770

    Basic-auth app bundle credential exposure in gatsby-source-wordpress

    Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authentication…

    gatsbyjs gatsby gatsby-source-wordpress Web / CMS npm