MEDIUM6.1

GHSA-72fv-qgj6-2w2p

Cross-site Scripting in NodeBB

Quick fix

GHSA-72fv-qgj6-2w2p — nodebb: upgrade to the fixed version with the command below.

npm install nodebb@0.8.2

Details

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.

Are you affected?

Enter the version of the package you're using.

Affected packages

Introduced in: 0Fixed in: 0.8.2

Fixnpm install nodebb@0.8.2

References