npmPackage

total4

5 known vulnerabilities (1 critical, 1 medium), with the versions each affects and the releases that fix them.

Version timeline

CVE-2023-30094
Affects 0.0.1-2 to 0.0.81-5 (0.0.81 is outside it)
CVE-2021-23390
Affects 0.0.1-2 to 0.0.42 (0.0.43 is outside it)
CVE-2019-15952
No published release is affected
No published release is affected
CVE-2019-15953
No published release is affected
No published release is affected
CVE-2019-15954
No published release is affected
No published release is affected

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2023-30094Medium 5.4
A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a…
Affected: fixed in 0.0.81.
Fixed in 0.0.81 (released Apr 7, 2023, 27 days before disclosure).
The latest release, 0.0.99, is not affected.
13% of total4 downloads last week were affected versions (69).
CVE-2021-23390Critical 9.8
Arbitrary Code Execution
Affected: fixed in 0.0.43.
Fixed in 0.0.43 (released Jun 7, 2021, 35 days before disclosure).
The latest release, 0.0.99, is not affected.
6.3% of total4 downloads last week were affected versions (34).
CVE-2019-15952Unrated
An issue was discovered in Total.js CMS 12.0.0.
Affected: versions 12.0.
No fix released.
0% of total4 downloads last week were affected versions (0).
CVE-2019-15953Unrated
An issue was discovered in Total.js CMS 12.0.0.
Affected: versions 12.0.
No fix released.
0% of total4 downloads last week were affected versions (0).
CVE-2019-15954Unrated
An issue was discovered in Total.js CMS 12.0.0.
Affected: versions 12.0.0.
No fix released.
0% of total4 downloads last week were affected versions (0).