~ / search / GHSA-hw2p-xqhq-3mjf

GHSA-hw2p-xqhq-3mjf

Cross site scripting in mobiledoc-kit

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-2932

Packages

EcosystemPackageAffectedFixed in
npm mobiledoc-kit < 0.14.2 0.14.2

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.

References

External links from the advisory. They lead to third-party sites.