Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@asymmetric-effort/specifyjs

npm

A declarative TypeScript UI framework built for performance and simplicity

View on github.com · View on npmjs.org

Security Advisories for @asymmetric-effort/specifyjs in npm

Moderate
10 days ago

@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString GSA_kwCzR0hTQS05M3E2LXd3amgtamM2aM4ABaFM

npm @asymmetric-effort/specifyjs
Moderate
10 days ago

@asymmetric-effort/specifyjs: No redirect target validation in secureFetch GSA_kwCzR0hTQS1qNXFwLXA0NGctMm00Oc4ABaFL

npm @asymmetric-effort/specifyjs
Moderate
10 days ago

@asymmetric-effort/specifyjs: `data:` URI allowed without size restriction GSA_kwCzR0hTQS0yOTQ0LTU3eHYtMjY4Ms4ABaFK

npm @asymmetric-effort/specifyjs
Moderate
10 days ago

@asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range) GSA_kwCzR0hTQS14dzU3LTIzcDgtOXdjNc4ABaFJ

npm @asymmetric-effort/specifyjs
Moderate
10 days ago

@asymmetric-effort/specifyjs: Production console warnings may leak internal framework state GSA_kwCzR0hTQS1xY3I4LXg1NTctN2NwM84ABaFI

npm @asymmetric-effort/specifyjs
Moderate
10 days ago

@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection GSA_kwCzR0hTQS01Yzd3LTR3bTMtODV2d84ABaFH

npm @asymmetric-effort/specifyjs
High
10 days ago

@asymmetric-effort/specifyjs: URL parse failure silently allows request GSA_kwCzR0hTQS04ODgyLWZydnYtOTJ3NM4ABaFG

npm @asymmetric-effort/specifyjs

Filter by Severity

Moderate 6 High 1