GitHub Advisoryadvisory · npm

GHSA-46m8-42hm-wvvw Cross-Site Scripting in emojione

HIGH Published 2020-09-01 Modified 2021-09-23 Official page ↗
Aliases
CVE-2016-1000231
Ecosystem
npm
Packages
emojione
Severity
High
Weaknesses
CWE-79
Reviewed
2020-08-31

Affected packages

• npm emojione: < 1.3.1 → fixed in 1.3.1

Description

Affected versions of `emojione` are vulnerable to cross-site scripting when user input is passed into the `toShort()`, `shortnameToImage()`, `unicodeToImage()`, and `toImage()` functions. Recommendation Update to version 1.3.1 or later.

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References