WS-2019-0211 (Medium) detected in quill-1.3.6.tgz - autoclosed

[mend-bolt-for-github]

WS-2019-0211 - Medium Severity Vulnerability

Vulnerable Library - quill-1.3.6.tgz

Your powerful, rich text editor

Library home page: https://registry.npmjs.org/quill/-/quill-1.3.6.tgz

Path to dependency file: /tmp/ws-scm/source/FrontEnd/package.json

Path to vulnerable library: /tmp/ws-scm/source/FrontEnd/node_modules/quill/package.json

Dependency Hierarchy:

• react-quill-1.3.3.tgz (Root Library)
  • ❌ quill-1.3.6.tgz (Vulnerable Library)

Found in HEAD commit: 467bf78f693ed36f71ad535787eadd84b882dd7b

Vulnerability Details

quill all versions are vulnerable to Reverse Tabnapping, allowing attackers to access window.opener for the original page when opening links.

Publish Date: 2019-09-05

URL: WS-2019-0211

CVSS 2 Score Details (5.0)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here

[mend-bolt-for-github]

✔️ This issue was automatically closed by WhiteSource because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the WhiteSource inventory.