Critical · 10.0 CVE-2023-2583 EUVD-2023-1537GHSA-g7rj-q722-245g

Code Injection in jsreport/jsreport

Published May 8, 2023 · Updated Jan 28, 2025 · Assigned by @huntrdev

Description

Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

Vendor	Product	Affected	Fixed
jsreport	jsreport/jsreport	unspecified – < 3.11.3	3.11.3

Ecosystem	Package	Affected	Fixed	Record
npm	jsreport	< 3.11.3	3.11.3	GHSA-g7rj-q722-245g