GMS-2023-1879: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

July 6, 2023

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in @vendure/admin-ui-plugin.

References

github.com/advisories/GHSA-gm68-572p-q28r
github.com/vendure-ecommerce/vendure/blob/master/CHANGELOG.md
github.com/vendure-ecommerce/vendure/commit/0cdc92b241e6fd4017ddfc9fbdca189fc7c1ada0
github.com/vendure-ecommerce/vendure/security/advisories/GHSA-gm68-572p-q28r

Code Behaviors & Features

Detect and mitigate GMS-2023-1879 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →