NodeJS/hexo/1.1.3
A fast, simple & powerful blog framework, powered by Node.js.
https://www.npmjs.com/package/hexo
MIT
1 Security Vulnerabilities
Hexo Vulnerable to XSS
Published date: 2021-12-01T18:27:44Z
CVE: CVE-2021-25987
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2021-25987
- https://github.com/hexojs/hexo/commit/5170df2d3fa9c69e855c4b7c2b084ebfd92d5200
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25987
- https://github.com/advisories/GHSA-q54r-r9pr-w7qv
- https://github.com/hexojs/hexo/issues/4838
- https://github.com/hexojs/hexo/pull/4750
Hexo versions 0.0.1 to 5.4.0 are vulnerable against stored XSS. The post “body” and “tags” don’t sanitize malicious javascript during web page generation. Local unprivileged attacker can inject arbitrary code.
Affected versions:
["0.0.1", "0.0.2", "0.0.3", "0.0.4", "0.0.5", "0.0.6", "0.1.0", "0.1.1", "0.1.2", "0.1.3", "0.1.4", "0.1.5", "0.1.6", "0.1.7", "0.1.8", "0.1.9", "0.1.10", "0.1.11", "0.2.0", "0.2.1", "0.3.0", "0.3.1", "0.3.2", "0.4.0", "0.4.1", "0.4.2", "0.4.3", "0.4.4", "0.4.5", "0.5.0", "0.5.1", "0.5.2", "0.5.3", "0.5.4", "0.5.5", "0.5.6", "0.5.7", "0.5.8", "0.5.9", "0.5.10", "0.5.11", "0.5.12", "1.0.0", "1.0.1", "1.0.2", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.0.7", "1.0.8", "1.0.9", "1.1.0", "1.1.1", "1.1.2", "1.1.3", "1.1.4", "1.2.0", "1.2.1", "1.2.2", "1.2.3", "1.2.4", "2.0.0-beta2", "2.0.0-rc1", "2.0.0-rc2", "2.0.0-beta1", "2.0.0-rc3", "2.0.0", "2.0.1", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "2.0.6", "2.0.7", "2.1.0", "2.1.1", "2.2.0", "2.2.1", "2.3.0", "2.4.0", "2.4.1", "2.4.2", "2.4.3", "2.4.4", "2.4.5", "2.5.1", "2.5.2", "2.5.3", "2.5.4", "2.5.5", "2.5.6", "2.5.7", "2.6.0", "2.6.1", "2.6.2", "2.6.3", "2.7.0", "2.7.1", "2.8.0", "2.8.1", "2.8.2", "2.8.3", "3.0.0-beta.1", "3.0.0-beta.2", "3.0.0-beta.3", "3.0.0-beta.4", "3.0.0-rc.1", "3.0.0-rc.2", "3.0.0-rc.3", "3.0.0-rc.4", "3.0.0", "3.0.1", "3.1.0", "3.1.1", "3.2.0-beta.1", "3.2.0-beta.2", "3.2.0", "3.2.1", "3.2.2", "3.3.0", "3.3.1", "3.3.5", "3.3.7", "3.3.8", "3.3.9", "3.4.0", "3.4.1", "3.4.2", "3.4.3", "3.4.4", "3.5.0", "3.6.0", "3.7.0", "3.7.1", "3.8.0", "3.9.0", "4.0.0", "4.1.0", "4.1.1", "4.2.0", "4.2.1", "5.0.0", "5.0.1", "5.0.2", "5.1.0", "5.1.1", "5.2.0", "5.3.0", "5.4.0"]
Secure versions:
[6.0.0, 5.4.1, 6.1.0, 5.4.2, 6.2.0, 6.3.0, 7.0.0-rc1, 7.0.0-rc2, 7.0.0, 7.1.0, 7.1.1, 7.2.0, 7.3.0]
Recommendation:
Update to version 7.3.0.
163 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 7.3.0 | MIT | 2024-07-01 - 14:35 | 4 months | |
| 7.2.0 | MIT | 2024-04-17 - 10:34 | 7 months | |
| 7.1.1 | MIT | 2024-01-22 - 11:16 | 9 months | |
| 7.1.0 | MIT | 2024-01-19 - 14:11 | 10 months | |
| 7.0.0 | MIT | 2023-10-31 - 13:35 | about 1 year | |
| 7.0.0-rc2 | MIT | 2023-07-11 - 13:48 | over 1 year | |
| 7.0.0-rc1 | MIT | 2023-03-18 - 04:23 | over 1 year | |
| 6.3.0 | MIT | 2022-09-08 - 13:04 | about 2 years | |
| 6.2.0 | MIT | 2022-05-10 - 20:27 | over 2 years | |
| 6.1.0 | MIT | 2022-03-11 - 12:02 | over 2 years | |
| 6.0.0 | MIT | 2021-12-22 - 13:13 | almost 3 years | |
| 5.4.2 | MIT | 2022-04-07 - 13:14 | over 2 years | |
| 5.4.1 | MIT | 2022-01-22 - 11:35 | almost 3 years | |
| 5.4.0 | MIT | 1 | 2021-02-21 - 07:59 | over 3 years |
| 5.3.0 | MIT | 1 | 2020-12-17 - 13:50 | almost 4 years |
| 5.2.0 | MIT | 1 | 2020-09-17 - 09:08 | about 4 years |
| 5.1.1 | MIT | 1 | 2020-08-23 - 08:59 | about 4 years |
| 5.1.0 | MIT | 1 | 2020-08-22 - 03:26 | about 4 years |
| 5.0.2 | MIT | 1 | 2020-08-10 - 07:31 | about 4 years |
| 5.0.1 | MIT | 1 | 2020-08-10 - 04:21 | about 4 years |
| 5.0.0 | MIT | 1 | 2020-07-29 - 02:28 | over 4 years |
| 4.2.1 | MIT | 1 | 2020-05-14 - 12:39 | over 4 years |
| 4.2.0 | MIT | 1 | 2019-12-22 - 10:20 | almost 5 years |
| 4.1.1 | MIT | 1 | 2019-12-12 - 07:26 | almost 5 years |
| 4.1.0 | MIT | 1 | 2019-12-09 - 03:50 | almost 5 years |
| 4.0.0 | MIT | 1 | 2019-10-16 - 00:19 | about 5 years |
| 3.9.0 | MIT | 1 | 2019-06-16 - 16:36 | over 5 years |
| 3.8.0 | MIT | 1 | 2018-10-19 - 07:30 | about 6 years |
| 3.7.1 | MIT | 1 | 2018-04-10 - 05:12 | over 6 years |
| 3.7.0 | MIT | 1 | 2018-03-29 - 05:53 | over 6 years |
| 3.6.0 | MIT | 1 | 2018-02-28 - 07:41 | over 6 years |
| 3.5.0 | MIT | 1 | 2018-01-25 - 05:54 | almost 7 years |
| 3.4.4 | MIT | 1 | 2017-12-20 - 06:08 | almost 7 years |
| 3.4.3 | MIT | 1 | 2017-12-05 - 04:41 | almost 7 years |
| 3.4.2 | MIT | 1 | 2017-11-22 - 15:22 | almost 7 years |
| 3.4.1 | MIT | 1 | 2017-11-15 - 13:46 | almost 7 years |
| 3.4.0 | MIT | 1 | 2017-10-29 - 02:09 | about 7 years |
| 3.3.9 | MIT | 1 | 2017-09-05 - 22:23 | about 7 years |
| 3.3.8 | MIT | 1 | 2017-07-18 - 14:21 | over 7 years |
| 3.3.7 | MIT | 1 | 2017-05-24 - 01:33 | over 7 years |
| 3.3.5 | MIT | 1 | 2017-04-28 - 17:42 | over 7 years |
| 3.3.1 | MIT | 1 | 2017-04-04 - 23:07 | over 7 years |
| 3.3.0 | MIT | 1 | 2017-04-03 - 19:00 | over 7 years |
| 3.2.2 | MIT | 1 | 2016-06-28 - 21:40 | over 8 years |
| 3.2.1 | MIT | 1 | 2016-06-28 - 19:56 | over 8 years |
| 3.2.0 | MIT | 1 | 2016-02-28 - 04:38 | over 8 years |
| 3.2.0-beta.2 | MIT | 1 | 2015-12-06 - 12:47 | almost 9 years |
| 3.2.0-beta.1 | MIT | 1 | 2015-11-19 - 08:25 | almost 9 years |
| 3.1.1 | MIT | 1 | 2015-05-20 - 11:17 | over 9 years |
| 3.1.0 | MIT | 1 | 2015-05-20 - 10:41 | over 9 years |
| 3.0.1 | MIT | 1 | 2015-04-06 - 13:17 | over 9 years |
| 3.0.0 | MIT | 1 | 2015-03-05 - 02:56 | over 9 years |
| 3.0.0-rc.4 | MIT | 1 | 2015-02-14 - 07:37 | over 9 years |
| 3.0.0-rc.3 | MIT | 1 | 2015-02-08 - 09:11 | over 9 years |
| 3.0.0-rc.2 | MIT | 1 | 2015-01-31 - 07:15 | almost 10 years |
| 3.0.0-rc.1 | MIT | 1 | 2015-01-29 - 17:32 | almost 10 years |
| 3.0.0-beta.4 | MIT | 1 | 2015-01-25 - 06:24 | almost 10 years |
| 3.0.0-beta.3 | MIT | 1 | 2015-01-23 - 01:33 | almost 10 years |
| 3.0.0-beta.2 | MIT | 1 | 2015-01-15 - 11:23 | almost 10 years |
| 3.0.0-beta.1 | MIT | 1 | 2015-01-06 - 16:33 | almost 10 years |
| 2.8.3 | MIT | 1 | 2014-09-06 - 14:40 | about 10 years |
| 2.8.2 | MIT | 1 | 2014-08-03 - 06:30 | about 10 years |
| 2.8.1 | MIT | 1 | 2014-07-23 - 14:48 | over 10 years |
| 2.8.0 | MIT | 1 | 2014-07-13 - 14:30 | over 10 years |
| 2.7.1 | MIT | 1 | 2014-06-14 - 17:07 | over 10 years |
| 2.7.0 | MIT | 1 | 2014-06-14 - 00:57 | over 10 years |
| 2.6.3 | MIT | 1 | 2014-06-09 - 06:38 | over 10 years |
| 2.6.2 | MIT | 1 | 2014-06-06 - 16:38 | over 10 years |
| 2.6.1 | MIT | 1 | 2014-05-31 - 05:46 | over 10 years |
| 2.6.0 | MIT | 1 | 2014-05-18 - 10:01 | over 10 years |
| 2.5.7 | MIT | 1 | 2014-05-10 - 14:29 | over 10 years |
| 2.5.6 | MIT | 1 | 2014-04-27 - 16:46 | over 10 years |
| 2.5.5 | MIT | 1 | 2014-04-27 - 05:45 | over 10 years |
| 2.5.4 | MIT | 1 | 2014-04-26 - 15:25 | over 10 years |
| 2.5.3 | MIT | 1 | 2014-04-15 - 13:58 | over 10 years |
| 2.5.2 | MIT | 1 | 2014-03-16 - 02:38 | over 10 years |
| 2.5.1 | MIT | 1 | 2014-03-14 - 15:33 | over 10 years |
| 2.4.5 | MIT | 1 | 2014-01-14 - 07:39 | almost 11 years |
| 2.4.4 | MIT | 1 | 2014-01-12 - 02:01 | almost 11 years |
| 2.4.3 | MIT | 1 | 2014-01-11 - 05:01 | almost 11 years |
| 2.4.2 | MIT | 1 | 2013-12-29 - 14:47 | almost 11 years |
| 2.4.1 | MIT | 1 | 2013-12-29 - 13:03 | almost 11 years |
| 2.4.0 | MIT | 1 | 2013-12-28 - 15:54 | almost 11 years |
| 2.3.0 | MIT | 1 | 2013-10-26 - 15:21 | about 11 years |
| 2.2.1 | MIT | 1 | 2013-10-11 - 16:04 | about 11 years |
| 2.2.0 | MIT | 1 | 2013-09-21 - 07:55 | about 11 years |
| 2.1.1 | MIT | 1 | 2013-09-14 - 14:29 | about 11 years |
| 2.1.0 | MIT | 1 | 2013-09-08 - 10:15 | about 11 years |
| 2.0.7 | MIT | 1 | 2013-09-07 - 01:47 | about 11 years |
| 2.0.6 | MIT | 1 | 2013-08-29 - 19:57 | about 11 years |
| 2.0.5 | MIT | 1 | 2013-08-28 - 17:05 | about 11 years |
| 2.0.4 | MIT | 1 | 2013-08-27 - 14:52 | about 11 years |
| 2.0.3 | MIT | 1 | 2013-08-27 - 13:50 | about 11 years |
| 2.0.2 | MIT | 1 | 2013-08-27 - 01:22 | about 11 years |
| 2.0.1 | MIT | 1 | 2013-08-26 - 08:48 | about 11 years |
| 2.0.0 | MIT | 1 | 2013-08-26 - 01:21 | about 11 years |
| 2.0.0-rc3 | MIT | 1 | 2013-08-23 - 16:25 | about 11 years |
| 2.0.0-rc2 | MIT | 1 | 2013-08-20 - 01:38 | about 11 years |
| 2.0.0-rc1 | MIT | 1 | 2013-07-21 - 04:51 | over 11 years |
| 2.0.0-beta2 | MIT | 1 | 2013-07-14 - 05:13 | over 11 years |