Description
PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PostHog | posthog-js | < 1.57.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | posthog-js | < 1.57.2 | 1.57.2 | GHSA-8775-5hwv-wr6v |