Known vulnerabilities in pupa
Vendor:
npm Inc.
Software:
pupa
Software CPE:
cpe:2.3:a:npm:pupa:*:*:*:*:*:*:*:*
Website:
https://www.npmjs.com/
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU18382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Medium | v2.0.0 | 02.05.2019 |
SB2019050204 |