Threats affecting pkg:github/hebing123/strongshop

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.7%	CVE-2024-37621strongshop · Template Injection High7.2EPSS 0.7%2024-06-17CVE Database V5CVE-2024-37621 StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php. EPSS 0.7%Vulnerability CWE-1336	CVE Database V5	2024-06-17
High	7.6	EPSS 0.4%	CVE-2024-37619strongshop · Cross-site Scripting High7.6EPSS 0.4%2024-06-17CVE Database V5CVE-2024-37619 StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-06-17

Page 1 of 1