Skip to content

Commit e6fcf85

Browse files
eoftedaleoftedal
committed
Add CVE-2024-51434 and CVE-2025-27152 to repository
1 parent fddb044 commit e6fcf85

5 files changed

+225
-0
lines changed

‎repository/jsrepository-master.json

+45
Original file line numberDiff line numberDiff line change
@@ -4773,6 +4773,30 @@
47734773
},
47744774
"axios": {
47754775
"vulnerabilities": [
4776+
{
4777+
"ranges": [
4778+
{
4779+
"atOrAbove": "0",
4780+
"below": "1.8.2"
4781+
}
4782+
],
4783+
"summary": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
4784+
"cwe": ["CWE-918"],
4785+
"severity": "high",
4786+
"identifiers": {
4787+
"CVE": ["CVE-2025-27152"],
4788+
"githubID": "GHSA-jr5f-v2jv-69x6"
4789+
},
4790+
"info": [
4791+
"https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
4792+
"https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6",
4793+
"https://nvd.nist.gov/vuln/detail/CVE-2025-27152",
4794+
"https://github.com/axios/axios/issues/6463",
4795+
"https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f",
4796+
"https://github.com/axios/axios",
4797+
"https://github.com/axios/axios/releases/tag/v1.8.2"
4798+
]
4799+
},
47764800
{
47774801
"ranges": [
47784802
{
@@ -5665,6 +5689,27 @@
56655689
"froala": {
56665690
"npmname": "froala-editor",
56675691
"vulnerabilities": [
5692+
{
5693+
"ranges": [
5694+
{
5695+
"atOrAbove": "0",
5696+
"below": "4.3.1"
5697+
}
5698+
],
5699+
"summary": "Froala WYSIWYG editor allows cross-site scripting (XSS)",
5700+
"cwe": ["CWE-79"],
5701+
"severity": "medium",
5702+
"identifiers": {
5703+
"CVE": ["CVE-2024-51434"],
5704+
"githubID": "GHSA-549p-5c7f-c5p4"
5705+
},
5706+
"info": [
5707+
"https://github.com/advisories/GHSA-549p-5c7f-c5p4",
5708+
"https://nvd.nist.gov/vuln/detail/CVE-2024-51434",
5709+
"https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434",
5710+
"https://github.com/froala/wysiwyg-editor"
5711+
]
5712+
},
56685713
{
56695714
"ranges": [
56705715
{

‎repository/jsrepository-v2.json

+45
Original file line numberDiff line numberDiff line change
@@ -6325,6 +6325,30 @@
63256325
"https://github.com/axios/axios/releases/tag/v1.7.4",
63266326
"https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html"
63276327
]
6328+
},
6329+
{
6330+
"atOrAbove": "0",
6331+
"below": "1.8.2",
6332+
"cwe": [
6333+
"CWE-918"
6334+
],
6335+
"severity": "high",
6336+
"identifiers": {
6337+
"summary": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
6338+
"CVE": [
6339+
"CVE-2025-27152"
6340+
],
6341+
"githubID": "GHSA-jr5f-v2jv-69x6"
6342+
},
6343+
"info": [
6344+
"https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
6345+
"https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6",
6346+
"https://nvd.nist.gov/vuln/detail/CVE-2025-27152",
6347+
"https://github.com/axios/axios/issues/6463",
6348+
"https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f",
6349+
"https://github.com/axios/axios",
6350+
"https://github.com/axios/axios/releases/tag/v1.8.2"
6351+
]
63286352
}
63296353
],
63306354
"extractors": {
@@ -7335,6 +7359,27 @@
73357359
"https://froala.com/wysiwyg-editor/changelog/#4.1.4",
73367360
"https://github.com/advisories/GHSA-hvpq-7vcc-5hj5"
73377361
]
7362+
},
7363+
{
7364+
"atOrAbove": "0",
7365+
"below": "4.3.1",
7366+
"cwe": [
7367+
"CWE-79"
7368+
],
7369+
"severity": "medium",
7370+
"identifiers": {
7371+
"summary": "Froala WYSIWYG editor allows cross-site scripting (XSS)",
7372+
"CVE": [
7373+
"CVE-2024-51434"
7374+
],
7375+
"githubID": "GHSA-549p-5c7f-c5p4"
7376+
},
7377+
"info": [
7378+
"https://github.com/advisories/GHSA-549p-5c7f-c5p4",
7379+
"https://nvd.nist.gov/vuln/detail/CVE-2024-51434",
7380+
"https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434",
7381+
"https://github.com/froala/wysiwyg-editor"
7382+
]
73387383
}
73397384
],
73407385
"extractors": {

‎repository/jsrepository-v3.json

+45
Original file line numberDiff line numberDiff line change
@@ -6471,6 +6471,30 @@
64716471
"https://github.com/axios/axios/releases/tag/v1.7.4",
64726472
"https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html"
64736473
]
6474+
},
6475+
{
6476+
"atOrAbove": "0",
6477+
"below": "1.8.2",
6478+
"cwe": [
6479+
"CWE-918"
6480+
],
6481+
"severity": "high",
6482+
"identifiers": {
6483+
"summary": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
6484+
"CVE": [
6485+
"CVE-2025-27152"
6486+
],
6487+
"githubID": "GHSA-jr5f-v2jv-69x6"
6488+
},
6489+
"info": [
6490+
"https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
6491+
"https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6",
6492+
"https://nvd.nist.gov/vuln/detail/CVE-2025-27152",
6493+
"https://github.com/axios/axios/issues/6463",
6494+
"https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f",
6495+
"https://github.com/axios/axios",
6496+
"https://github.com/axios/axios/releases/tag/v1.8.2"
6497+
]
64746498
}
64756499
],
64766500
"extractors": {
@@ -7503,6 +7527,27 @@
75037527
"https://froala.com/wysiwyg-editor/changelog/#4.1.4",
75047528
"https://github.com/advisories/GHSA-hvpq-7vcc-5hj5"
75057529
]
7530+
},
7531+
{
7532+
"atOrAbove": "0",
7533+
"below": "4.3.1",
7534+
"cwe": [
7535+
"CWE-79"
7536+
],
7537+
"severity": "medium",
7538+
"identifiers": {
7539+
"summary": "Froala WYSIWYG editor allows cross-site scripting (XSS)",
7540+
"CVE": [
7541+
"CVE-2024-51434"
7542+
],
7543+
"githubID": "GHSA-549p-5c7f-c5p4"
7544+
},
7545+
"info": [
7546+
"https://github.com/advisories/GHSA-549p-5c7f-c5p4",
7547+
"https://nvd.nist.gov/vuln/detail/CVE-2024-51434",
7548+
"https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434",
7549+
"https://github.com/froala/wysiwyg-editor"
7550+
]
75067551
}
75077552
],
75087553
"extractors": {

‎repository/jsrepository-v4.json

+45
Original file line numberDiff line numberDiff line change
@@ -6470,6 +6470,30 @@
64706470
"https://github.com/axios/axios/releases/tag/v1.7.4",
64716471
"https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html"
64726472
]
6473+
},
6474+
{
6475+
"atOrAbove": "0",
6476+
"below": "1.8.2",
6477+
"cwe": [
6478+
"CWE-918"
6479+
],
6480+
"severity": "high",
6481+
"identifiers": {
6482+
"summary": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
6483+
"CVE": [
6484+
"CVE-2025-27152"
6485+
],
6486+
"githubID": "GHSA-jr5f-v2jv-69x6"
6487+
},
6488+
"info": [
6489+
"https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
6490+
"https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6",
6491+
"https://nvd.nist.gov/vuln/detail/CVE-2025-27152",
6492+
"https://github.com/axios/axios/issues/6463",
6493+
"https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f",
6494+
"https://github.com/axios/axios",
6495+
"https://github.com/axios/axios/releases/tag/v1.8.2"
6496+
]
64736497
}
64746498
],
64756499
"extractors": {
@@ -7502,6 +7526,27 @@
75027526
"https://froala.com/wysiwyg-editor/changelog/#4.1.4",
75037527
"https://github.com/advisories/GHSA-hvpq-7vcc-5hj5"
75047528
]
7529+
},
7530+
{
7531+
"atOrAbove": "0",
7532+
"below": "4.3.1",
7533+
"cwe": [
7534+
"CWE-79"
7535+
],
7536+
"severity": "medium",
7537+
"identifiers": {
7538+
"summary": "Froala WYSIWYG editor allows cross-site scripting (XSS)",
7539+
"CVE": [
7540+
"CVE-2024-51434"
7541+
],
7542+
"githubID": "GHSA-549p-5c7f-c5p4"
7543+
},
7544+
"info": [
7545+
"https://github.com/advisories/GHSA-549p-5c7f-c5p4",
7546+
"https://nvd.nist.gov/vuln/detail/CVE-2024-51434",
7547+
"https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434",
7548+
"https://github.com/froala/wysiwyg-editor"
7549+
]
75057550
}
75067551
],
75077552
"extractors": {

‎repository/jsrepository.json

+45
Original file line numberDiff line numberDiff line change
@@ -6268,6 +6268,30 @@
62686268
"https://github.com/axios/axios/releases/tag/v1.7.4",
62696269
"https://jeffhacks.com/advisories/2024/06/24/CVE-2024-39338.html"
62706270
]
6271+
},
6272+
{
6273+
"atOrAbove": "0",
6274+
"below": "1.8.2",
6275+
"cwe": [
6276+
"CWE-918"
6277+
],
6278+
"severity": "high",
6279+
"identifiers": {
6280+
"summary": "axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL",
6281+
"CVE": [
6282+
"CVE-2025-27152"
6283+
],
6284+
"githubID": "GHSA-jr5f-v2jv-69x6"
6285+
},
6286+
"info": [
6287+
"https://github.com/advisories/GHSA-jr5f-v2jv-69x6",
6288+
"https://github.com/axios/axios/security/advisories/GHSA-jr5f-v2jv-69x6",
6289+
"https://nvd.nist.gov/vuln/detail/CVE-2025-27152",
6290+
"https://github.com/axios/axios/issues/6463",
6291+
"https://github.com/axios/axios/commit/fb8eec214ce7744b5ca787f2c3b8339b2f54b00f",
6292+
"https://github.com/axios/axios",
6293+
"https://github.com/axios/axios/releases/tag/v1.8.2"
6294+
]
62716295
}
62726296
],
62736297
"extractors": {
@@ -7270,6 +7294,27 @@
72707294
"https://froala.com/wysiwyg-editor/changelog/#4.1.4",
72717295
"https://github.com/advisories/GHSA-hvpq-7vcc-5hj5"
72727296
]
7297+
},
7298+
{
7299+
"atOrAbove": "0",
7300+
"below": "4.3.1",
7301+
"cwe": [
7302+
"CWE-79"
7303+
],
7304+
"severity": "medium",
7305+
"identifiers": {
7306+
"summary": "Froala WYSIWYG editor allows cross-site scripting (XSS)",
7307+
"CVE": [
7308+
"CVE-2024-51434"
7309+
],
7310+
"githubID": "GHSA-549p-5c7f-c5p4"
7311+
},
7312+
"info": [
7313+
"https://github.com/advisories/GHSA-549p-5c7f-c5p4",
7314+
"https://nvd.nist.gov/vuln/detail/CVE-2024-51434",
7315+
"https://georgyg.com/home/froala-wysiwyg-editor---xss-cve-2024-51434",
7316+
"https://github.com/froala/wysiwyg-editor"
7317+
]
72737318
}
72747319
],
72757320
"extractors": {

0 commit comments

Comments
 (0)