Search for packages
| purl | pkg:npm/apostrophe@0.5.226 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5v79-remg-7ub4
Aliases: GHSA-pv6r-vchh-cxg9 GMS-2020-705 |
Denial of Service in apostrophe Versions of `apostrophe` prior to 2.97.1 are vulnerable to Denial of Service. The `apostrophe-jobs` module sets a callback for incoming jobs and doesn't clear it regardless of its status. This causes the server to accumulate callbacks, allowing an attacker to start a large number of jobs and exhaust system memory. ## Recommendation Upgrade to version 2.97.1 or later. |
Affected by 0 other vulnerabilities. |
|
VCID-pvxq-3qsf-efc5
Aliases: GHSA-h97g-4mx7-5p2p GMS-2020-704 |
Open Redirect in apostrophe Versions of `apostrophe` prior to 2.92.0 are vulnerable to Open Redirect. The package redirected requests to third-party websites if escaped URLs followed by a trailing `/` were appended at the end. ## Recommendation Update to version 2.92.0 or later. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:37:49.006022+00:00 | GitLab Importer | Affected by | VCID-pvxq-3qsf-efc5 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/apostrophe/GMS-2020-704.yml | 38.6.0 |
| 2026-06-04T20:36:24.237313+00:00 | GitLab Importer | Affected by | VCID-5v79-remg-7ub4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/apostrophe/GMS-2020-705.yml | 38.6.0 |