~ / search / GHSA-jr64-pggr-j8xj

GHSA-jr64-pggr-j8xj

Shiba vulnerable to XSS leading to code execution

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-1000491

Packages

EcosystemPackageAffectedFixed in
npm shiba < 1.1.1 1.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

References

External links from the advisory. They lead to third-party sites.