demo-joplin (>=1.0.1 <=1.0.8) potentially affected by CVE-2022-40277 via joplin (=0.10.93)

joplin NPM version =0.10.93 is affected by a known vulnerability. The following packages have a transitive dependency on joplin and may be impacted: - demo-joplin =1.0.1, =1.0.8 Source cves: CVE-2022-40277 Source advisory: OSV:GHSA-MJR5-V9C9-MM7G...

CVE-2022-40277

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:23+00:00| seen| https://t.me/cibsecurity/50784 2025-05-20 18:42:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17043...