Lucene search
GoogleOSV:GHSA-W4V7-HWX7-9929HistoryNov 08, 2021 - 5:50 p.m.
Cross-site Scripting in tempura
2021-11-0817:50:10
Google
osv.dev
14
cross-site scripting
tempura
vulnerability
EPSS
0.002
Percentile
56.7%
This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.
Related
veracode
veracode
Cross-Site Scripting (XSS)
2021-11-05 08:40:58
nvd
nvd
CVE-2021-23784
2021-11-03 18:15:08
cvelist
cvelist
CVE-2021-23784 Cross-site Scripting (XSS)
2021-11-03 17:20:42
github
github
Cross-site Scripting in tempura
2021-11-08 17:50:10
cve
cve
CVE-2021-23784
2021-11-03 18:15:08
prion
prion
Cross site scripting
2021-11-03 18:15:00
osv
osv
CVE-2021-23784
2021-11-03 18:15:08