GitHub Advisoryadvisory · npm

GHSA-7jfh-2xc9-ccv7 Cross-Site Scripting in public

LOW Published 2019-05-31 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
public
Severity
Low
Weaknesses
CWE-79
Reviewed
2019-05-31

Affected packages

• npm public: < 0.1.4 → fixed in 0.1.4 • npm public: 0.1.5 (no fix yet)

Description

All versions of `public` are vulnerable to stored cross-site scripting (XSS). Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References