CVE-2013-7370
Fixed in a distro release EPSS 1%
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
Products: redhat openshift, sencha connect, opensuse, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | connect | 2.8.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | node-connect | 3.0.0-1 |
| Debian 13 | node-connect | 3.0.0-1 |
| Debian 14 | node-connect | 3.0.0-1 |
| Ubuntu 16.04 LTS | node-connect | no fix |
| Ubuntu 18.04 LTS | node-connect | no fix |
| Ubuntu 20.04 LTS | node-connect | no fix |
| Ubuntu 22.04 LTS | node-connect | no fix |