← All advisories

Medium severity6.1NVD Advisory· Published Aug 8, 2019· Updated Jun 17, 2026

CVE-2019-14772

CVE-2019-14772

Description

verdaccio before 3.12.0 allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
verdaccionpm	< 3.12.0	3.12.0

Affected products

3

verdaccio/verdacciodescription
ghsa-coords
pkg:npm/verdaccio
Range: < 3.12.0
Verdaccio/Verdaccio
cpe:2.3:a:verdaccio:verdaccio:*:*:*:*:*:*:*:*
Range: <3.12.0

Patches

Vulnerability mechanics

References

5

github.com/verdaccio/verdaccio/security/advisories/GHSA-78j5-gcmf-vqc8nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-78j5-gcmf-vqc8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-14772ghsaADVISORY
www.npmjs.com/advisories/832ghsaWEB
www.npmjs.com/advisories/833ghsaWEB

News mentions

0

No linked articles in our index yet.