Approved changes feed: RSS · Atom
cpe:2.3:a:ansi_up_project:ansi_up:*:*:*:*:*:node.js:*:*
part: a version: * update: *
| Vendor | Ansi Up Project (2b8f57ed-c064-5aed-8a4c-a5434774f8a4) |
|---|---|
| Product | Ansi Up (c7f0472d-8506-555c-815c-45317f890c3e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3377 |
vulnerable | 2026-06-08 05:33:51.235758 |
Details available
The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.
Published: 2021-03-05T19:03:58.000Z
Updated: 2025-11-03T21:44:49.008Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.