Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8176
6.1
MEDIUMCVSS v3
Severity scale
010
Description
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.
Shopify/quilt
GitHub[⚠️ Deprecated] A loosely related set of packages for JavaScript/TypeScript projects at Shopify
GitHub[⚠️ Deprecated] A loosely related set of packages for JavaScript/TypeScript projects at ShopifyNVD