VulnerableCode Package Details - pkg:npm/converse.js@1.0.6

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:npm/converse.js@1.0.6

purl	pkg:npm/converse.js@1.0.6

Next non-vulnerable version	3.3.1
Latest non-vulnerable version	3.3.3
Risk	3.1

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-3sub-9rbq-vfa5 Aliases: CVE-2018-6591 GHSA-mv4h-qm24-x4gh		3.3.1 Affected by 0 other vulnerabilities. 3.3.3 Affected by 0 other vulnerabilities.
VCID-cqv4-hqwz-jqg2 Aliases: CVE-2017-5858 GHSA-w973-2qcc-p78x	User Impersonation in converse.js	1.0.7 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.0.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-3sub-9rbq-vfa5
Aliases:
CVE-2018-6591
GHSA-mv4h-qm24-x4gh

3.3.1
Affected by 0 other vulnerabilities.

3.3.3
Affected by 0 other vulnerabilities.

VCID-cqv4-hqwz-jqg2
Aliases:
CVE-2017-5858
GHSA-w973-2qcc-p78x

User Impersonation in converse.js

1.0.7
Affected by 1 other vulnerability.

2.0.5
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T16:57:43.833989+00:00	GitLab Importer	Affected by	VCID-3sub-9rbq-vfa5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/converse.js/CVE-2018-6591.yml	38.6.0
2026-06-12T15:39:39.426110+00:00	GitLab Importer	Affected by	VCID-cqv4-hqwz-jqg2	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/converse.js/CVE-2017-5858.yml	38.6.0