An open API service providing security vulnerability metadata for many open source software ecosystems.
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
npm:@materializecss/materialize
PURL:
pkg:npm/%40materializecss%2Fmaterialize
|
< 1.1.0-alpha | 1.1.0-alpha | |
Affected Version RangesAll affected versions1.0.0 All unaffected versions1.1.0, 1.2.0, 1.2.1, 1.2.2, 2.0.3, 2.0.4, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2 |
|||
|
npm:materialize-css
PURL:
pkg:npm/materialize-css
|
<= 1.0.0 | No known fixed version | |
Affected Version RangesAll affected versions0.95.3, 0.96.1, 0.97.1, 0.97.2, 0.97.3, 0.97.4, 0.97.5, 0.97.6, 0.97.7, 0.97.8, 0.98.0, 0.98.1, 0.98.2, 0.99.0, 0.100.0, 0.100.1, 0.100.2, 1.0.0, 1.0.0-alpha.1, 1.0.0-alpha.2, 1.0.0-alpha.3, 1.0.0-alpha.4, 1.0.0-beta, 1.0.0-rc.1, 1.0.0-rc.2 |
|||
All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user.
No fix is currently available. Consider using an alternative module until a fix is made available.
References: