Skip to content
OpenAdvisories

Vendor

gatsbyjs

4 known vulnerabilities.

Products

gatsby 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2023-22491

    gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection

    Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the `gray-matter` npm package, which is vulnerable to Java…

    gatsbyjs gatsby react gatsby-transformer-remark Ubuntu npm
  • High 7.5
    CVE-2021-32770

    Basic-auth app bundle credential exposure in gatsby-source-wordpress

    Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authentication…

    gatsbyjs gatsby gatsby-source-wordpress Web / CMS npm