p PatchFirst

GHSA-h97g-4mx7-5p2p

GHSA-h97g-4mx7-5p2p · Open Redirect in apostrophe

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of `apostrophe` prior to 2.92.0 are vulnerable to Open Redirect. The package redirected requests to third-party websites if escaped URLs followed by a trailing `/` were appended at the end. ## Recommendation Update to version 2.92.0 or later.

Fix available

Published
Updated

Stack: node

Affected products and versions

  • apostrophe npm

    Affected ranges
    • SEMVER: < 2.92.0

    Update to 2.92.0

Original sources

Check your server →