VYPR

npm package

gatsby-source-wordpress

pkg:npm/gatsby-source-wordpress

Vulnerabilities (1)

  • CVE-2021-32770Jul 15, 2021
    affected < 4.0.8fixed 4.0.8

    Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authentication credentials in the g