CVE-2022-32172

Description

Zinc Cross-site Scripting vulnerability in github.com/zinclabs/zinc

How to fix CVE-2022-32172

To remediate CVE-2022-32172, upgrade the affected package to a fixed version below.

• Go/github.com/zinclabs/zinc—upgrade to 0.3.2 or later
• Go/github.com/zinclabs/zinc—upgrade to 0.3.2 or later
• —upgrade to 0.3.2 or later

Is CVE-2022-32172 being exploited?

Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.

Affected packages (3)

• >= 0.1.9, < 0.3.2
• >= 0.1.9, < 0.3.2
• >= 0.1.9, < 0.3.2

CVSS scores

References (5)

• ADVISORYgithub.com/advisories/GHSA-7j6x-42mm-p7jm
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-32172
• WEBgithub.com/zinclabs/zinc/commit/3376c248bade163430f9347742428f0a82cd322d
• WEBgithub.com/zincsearch/zincsearch/commit/3376c248bade163430f9347742428f0a82cd322d