Potential for Script Injection in syntax-error (GHSA-5726-g6r9-5f22)
Published: 2017-10-24T18:33:36Z
Aliases: CVE-2014-7192
Severity: HIGH · CWE: CWE-94

Versions of `syntax-error` prior to 1.1.1 are affected by a cross-site scripting vulnerability which may allow a malicious file to execute code when browserified. 

## Recommendation

Update to version 1.1.1 or later.

Affected packages:
package: ecosystem: npm
name: syntax-error
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.1.1