Vulnerabilities / JSZip library with known vulnerabilities

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
↓

Severity

Low

CWE Name

JSZip library with known vulnerabilities

CWE ID

CWE-1035

CVSS Score

4.8

Compliance

OWASP TOP10 -> A5, A6
PCI-DSS -> 6.2
ISO27001 -> A.8.9

JSZip library with known vulnerabilities

The application uses an outdated version of the JSZip library, which has known vulnerabilities.

How to fix

generic

To fix this issue, you just need to update JSZip to the latest version available on their website.
Do not forget to update all the JSZip files you have on the server.