What is GHSA-46m8-42hm-wvvw?

GHSA-46m8-42hm-wvvw is a security advisory published by GitHub Security Advisories with High severity. Cross-Site Scripting in emojione

Which CVE IDs does GHSA-46m8-42hm-wvvw cover?

GHSA-46m8-42hm-wvvw covers the following CVE IDs: CVE-2016-1000231. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-46m8-42hm-wvvw?

GHSA-46m8-42hm-wvvw affects 1 product, including: npm/emojione:\u003c= 1.3.0.

GHSA-46m8-42hm-wvvwHigh

Cross-Site Scripting in emojione

Vendor

GitHub Security Advisories

Published

September 1, 2020

Last Modified

March 28, 2023

🔗 CVE IDs covered (1)

CVE-2016-1000231 →

📋 Description

Affected versions of emojione are vulnerable to cross-site scripting when user input is passed into the toShort(), shortnameToImage(), unicodeToImage(), and toImage() functions.

Recommendation

Update to version 1.3.1 or later.

🎯 Affected products1

npm/emojione:<= 1.3.0

🔗 References (5)

https://github.com/Ranks/emojione/issues/61
https://nvd.nist.gov/vuln/detail/CVE-2016-1000231
https://github.com/joypixels/emojione/commit/613079b16c00e47fb3c44744a67ed88a9295afb1
https://github.com/joypixels/emojione/commits/v1.3.1/
https://github.com/advisories/GHSA-46m8-42hm-wvvw