GHSA-jr64-pggr-j8xj

Source

https://github.com/advisories/GHSA-jr64-pggr-j8xj

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jr64-pggr-j8xj/GHSA-jr64-pggr-j8xj.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-jr64-pggr-j8xj

Aliases

CVE-2017-1000491

Published

2022-05-14T03:49:58Z

Modified

2024-04-22T23:26:56.050680Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Shiba vulnerable to XSS leading to code execution

Details

Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.

Database specific

{
    "github_reviewed": true,
    "nvd_published_at": "2018-01-03T01:29:00Z",
    "github_reviewed_at": "2024-04-22T23:11:42Z",
    "severity": "MODERATE",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

npm / shiba

Package

Name: shiba; View open source insights on deps.dev
Purl: pkg:npm/shiba

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-jr64-pggr-j8xj/GHSA-jr64-pggr-j8xj.json"