Skip to content

Product

npm jekyll-for-github-projects vulnerabilities

1 published CVE affecting npm jekyll-for-github-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest npm jekyll-for-github-projects CVEs

Newest publication first

  1. GHSA-j5qg-46p9-w2rp Malicious Package in jekyll-for-github-projects

    Published
    Unknown

    Version 0.2.12 of jekyll-for-github-projects contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.