Description
Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | shiba | < 1.1.1 | 1.1.1 | GHSA-jr64-pggr-j8xj |
Medium · 6.1
CVE-2017-1000491
EUVD-2022-4421GHSA-jr64-pggr-j8xj
Shiba vulnerable to XSS leading to code execution
Published Jan 3, 2018 · Updated Sep 16, 2024 · Assigned by mitre