CVE-2019-14772: Verdaccio

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

verdaccio before 3.12.0 allows XSS.

Affected products

• Verdaccio Verdaccio: before 3.12.0 (fixed in 3.12.0)

Published 2019-08-08. Last modified 2026-06-17.