CVE-2014-7192

描述

Versions of `syntax-error` prior to 1.1.1 are affected by a cross-site scripting vulnerability which may allow a malicious file to execute code when browserified. ## Recommendation Update to version 1.1.1 or later.

如何修補 CVE-2014-7192

要修補 CVE-2014-7192,請將受影響套件升級到下列已修補版本。

• npm/syntax-error—升級至 1.1.1 或更新版本

CVE-2014-7192 正在被利用嗎?

中等 — EPSS 為 13.4%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 1.1.1

參考連結(8)

• ADVISORYgithub.com/advisories/GHSA-5726-g6r9-5f22
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2014-7192
• PATCHgithub.com/substack/node-syntax-error
• WEBwww-01.ibm.com/support/docview.wss?uid=swg21690815
• WEB