CVE-2024-45389 Information
Sep 04, 2024
cve
Description
Pagefind a fully static search library initializes its dynamic JavaScript and WebAssembly files relative to the location of the first script the user loads. This information is gathered by looking up the value of document.currentScript.src. Prior to Pagefind version 1.1.1 it is possible to ## Reference
https://github.com/CloudCannon/pagefind/security/advisories/GHSA-gprj-6m2f-j9hx
https://github.com/webpack/webpack/security/advisories/GHSA-4vvj-4cpr-p986
https://github.com/CloudCannon/pagefind/commit/14ec96864eabaf1d7d809d5da0186a8856261eeb