Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

trix

npm

A rich text editor for everyday writing

View on github.com · View on npmjs.org

Security Advisories for trix in npm

Moderate
20 days ago

Trix: Stored XSS via HTMLParser attribute injection on paste GSA_kwCzR0hTQS01M2cyLW12Y2MtcTl4M84ABfqr

rubygems, npm action_text-trix, trix
Low
5 months ago

Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController) GSA_kwCzR0hTQS01M3AzLWM3dnAtNG1jY84ABUbc

rubygems, npm action_text-trix, trix
Moderate
5 months ago

Trix has a Stored XSS vulnerability through serialized attributes GSA_kwCzR0hTQS1xbXBnLTh4ZzYtcGg1cc4ABTjc

npm, rubygems trix, action_text-trix
Moderate
7 months ago

Trix has a stored XSS vulnerability through its attachment attribute GSA_kwCzR0hTQS1nOWpnLXc4dm0tZzk2ds4ABQeR

rubygems, npm action_text-trix, trix
Low
over 1 year ago

Trix vulnerable to Cross-site Scripting on copy & paste GSA_kwCzR0hTQS1tY3J3LTc0NmctOXE4aM4ABHpA

npm trix
Moderate
over 1 year ago

Trix allows Cross-site Scripting via `javascript:` url in a link GSA_kwCzR0hTQS1qMzg2LTM0NDQtcWd3Z84ABC8g

npm trix
Moderate
over 1 year ago

Trix editor subject to XSS vulnerabilities on copy & paste GSA_kwCzR0hTQS02dng0LXYyanctcXdxaM4ABCNC

npm trix
Moderate
almost 2 years ago

Trix has a cross-site Scripting vulnerability on copy & paste GSA_kwCzR0hTQS1xbTJxLTlmM3EtMnZjds4AA-qk

npm trix
Moderate
over 2 years ago

Trix Editor Arbitrary Code Execution Vulnerability GSA_kwCzR0hTQS1xanFwLXhyOTYtY2o5Oc4AA70j

npm trix

Filter by Severity

Moderate 7 Low 2