Skip to content
OpenAdvisories

Package · Ubuntu

react

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2023-22491

    gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection

    Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the `gray-matter` npm package, which is vulnerable to Java…

    gatsbyjs gatsby gatsby-transformer-remark react Ubuntu npm