org.webjars.npm:rrweb (1.0.7), org.webjars.npm:rrweb-player (0.7.9) potentially affected by CVE-2025-45806 via org.webjars.npm:rrweb-snapshot (1.1.10)

org.webjars.npm:rrweb-snapshot MAVEN version 1.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:rrweb-snapshot and may be impacted: - org.webjars.npm:rrweb 1.0.7 - org.webjars.npm:rrweb-player 0.7.9 Source cves: CVE-2025-45806 Sourc...

@100mslive/roomkit-react (>=0.1.0, <=0.1.4-alpha.1), @18ways/mdx-translate (>=0.1.0-alpha.1011313d2aaf, <=0.1.0-alpha.9d8992d35859) +1150 more potentially affected by CVE-2025-45806 via rrweb-snapshot (>=0.6.11, <=2.1.1)

rrweb-snapshot NPM version =0.6.11, =0.1.0, =0.1.0-alpha.1011313d2aaf, =1.0.1, =1.1.0-alpha.1011313d2aaf, =2.32.12, =0.0.220, =0.0.215, =0.0.237, =1.2.0-1, =0.1.0, =0.0.0-canary.4c9336fa.20260814114910, =0.0.0-canary.4c9336fa.20260814114910, =0.1.0, =0.3.4, =0.0.1, =0.0.2 and more Source cves:...

CVE-2025-45806

A cross-site scripting XSS vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...