CVE-2022-0512

Advisory

Kolibri-explore-plugin 2.0.12 updates its NPM dependency 'url-parse' to v1.5.7 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Discovery: Fix global search results coming from previous async calls.
- Discovery: Fix focusing the search bar when user navigates to the search page.
- Discovery: Fix opening the support link in an external browser.
- Channels: Make description in bundles 50% wide.
- Content: Switch to a new Chapter Books channel.
- Content: Optimize the size in bytes of header background assets.
- Maintenance: Bump url-parse dependency because of a security vulnerability.

Resources

• https://pypi.org/project/kolibri-explore-plugin
• https://pyup.io/changelogs/kolibri-explore-plugin/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0512