Description
Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | restify node module | >=2.0.0 <=4.0.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | restify | >= 2.0.0, < 4.1.0 | 4.1.0 | GHSA-qw3g-35hc-fcrh |