GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`

Description

The GitHub Security Lab team has identified potential security vulnerabilities in scrypted.

We are committed to working with you to help resolve these issues. In this report you will find everything you need to effectively coordinate a resolution of these issues with the GHSL team.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 0.1.142

References

• GHSA-w4hv-vmv9-hgcr

Related Issues

• Scrypted Cross-site Scripting vulnerability - CVE-2023-47623
• @builder.io/qwik-city Cross-Site Request Forgery vulnerability - CVE-2023-2307
• engine.io Uncaught Exception vulnerability - CVE-2023-31125
• CKEditor cross-site scripting vulnerability in AJAX sample - CVE-2023-4771

You might also like:

14 Software Security Terms You Should Know

CSRF, XXE, and 12 Other Security Acronyms Explained

5 Security Vulnerabilities You Can Fix Right Now

Tags:

npm

@scrypted/core