CVE-2021-3377
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-3377
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3377.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-3377
- Aliases
- Downstream
- Published
- 2021-03-05T21:15:13Z
- Modified
- 2025-09-24T10:58:47.733502Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The npm package ansiup converts ANSI escape codes into HTML. In ansiup v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.
- References