| Package | Affected versions | Patched versions |
|---|---|---|
| apostrophe | < 2.92.0 | 2.92.0 |
Versions of apostrophe prior to 2.92.0 are vulnerable to Open Redirect. The package redirected requests to third-party websites if escaped URLs followed by a trailing / were appended at the end.
Update to version 2.92.0 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free