Description
verdaccio before 3.12.0 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | verdaccio | < 3.12.0 | 3.12.0 | GHSA-78j5-gcmf-vqc8 |
Medium · 6.1
CVE-2019-14772
EUVD-2019-0457GHSA-78j5-gcmf-vqc8
Cross-Site Scripting (XSS) in Verdaccio
Published Aug 8, 2019 · Updated Aug 5, 2024 · Assigned by mitre