CVE-2023-32325 (published 2023-05-26T23:00:17.880Z)
PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been patched in 1.57.2. Users are advised to upgrade. Users unable to upgrade should ensure that their Content Security Policy is in place.
Affected products: Vendor: PostHog
Product: posthog-js
Versions: < 1.57.2