AIKIDO-2024-10521

@gouvfr/dsfr is vulnerable to Malicious Code

100

Critical

@gouvfr/dsfr JS

AIKIDO-2024-10521: @gouvfr/dsfr is vulnerable to Malicious Code in versions 0.1.0 - 1.12.1.

Malicious Code
Vuln in 0.1.0 - 1.12.1
Fixed in 1.13.0
CVE-2024-38526
TL;DR

Who does this affect?

How can it be fixed?

Background info

Link to vendor website

Logo
© 2024 Aikido Security BV | BE0792914919
🇪🇺 Grauwpoort 1, 9000 Ghent, Belgium
🇺🇸 95 Third St, 2nd Fl, San Francisco, CA 94103, US
Any use of the intel.aikido.dev website and content is explicitly subject to Aikido Terms of Use