VYPR

gatsby-source-wordpress

by gatsbyjs

CVEs (1)

  • CVE-2021-32770HigJul 15, 2021
    risk 0.49cvss 7.5epss 0.01

    Gatsby is a framework for building websites. The gatsby-source-wordpress plugin prior to versions 4.0.8 and 5.9.2 leaks .htaccess HTTP Basic Authentication variables into the app.js bundle during build-time. Users who are not initializing basic authentication credentials in the…