medium6.9
CVE-2025-31128
gifplayer XSS vulnerability
Impact
### Impact XSS vulnerability. All versions under 0.3.7 are impacted ### Patches Please upgrade to 0.3.7
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | gifplayer | < 0.3.7 | 0.3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/rubentd/gifplayer/commit/2966193d4d066e5a6ba09dbdf1e1c7f8238630c8
- https://github.com/rubentd/gifplayer/security/advisories/GHSA-gr7w-hmch-25g7
- https://www.drupal.org/sa-contrib-2025-032
- https://github.com/advisories/GHSA-gr7w-hmch-25g7
- https://nvd.nist.gov/vuln/detail/CVE-2025-31128