senchalabs/connect

senchalabs/connect

Releases230

Frequency2 weeks 6 hours

Last Releaseabout 7 years ago

Stars9.89K

Connect is an extensible HTTP server framework for node using "plugins" known as middleware.

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2013-4691NVD↗	all versions	Dec 27, 2019Friday, 27 December 2019, 16:15	6.1 MEDIUM	4.3 MEDIUM
Sencha Labs Connect has XSS with connect.methodOverride()
CVE-2013-7371NVD↗	< 2.8.2	Dec 11, 2019Wednesday, 11 December 2019, 15:15	6.1 MEDIUM	4.3 MEDIUM
node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)
CVE-2013-7370NVD↗	< 2.8.1	Dec 11, 2019Wednesday, 11 December 2019, 14:15	6.1 MEDIUM	4.3 MEDIUM
node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware
CVE-2018-3717NVD↗	< 2.14.0	Jun 7, 2018Thursday, 7 June 2018, 02:29	5.4 MEDIUM	3.5 LOW
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.