Description
Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.
Remediation
References
https://github.com/restify/node-restify/issues/1018
https://nodesecurity.io/advisories/314
Related Vulnerabilities
CVE-2020-7604 Vulnerability in npm package pulverizr
CVE-2018-11698 Vulnerability in npm package node-sass
CVE-2019-10747 Vulnerability in npm package set-value
CVE-2020-36649 Vulnerability in maven package org.webjars.npm:papaparse
CVE-2020-21122 Vulnerability in maven package com.bstek.ureport:ureport2-console