dooaxghjxeokcv5.mee.nu Cross Site Scripting vulnerability OBB-3424694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

@story-telling-reporter/draft-editor (>=2.1.0-beta.0, <=2.1.2) potentially affected by unknown CVE via @keystone-6/core (5.2.0)

@keystone-6/core NPM version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @story-telling-reporter/draft-editor =2.1.0-beta.0, =2.1.2 Source cves: unknown CVE Source advisory: GHSA-5FP6-4XW3-XQQ3...

votingstation.net Cross Site Scripting vulnerability OBB-3398356

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview @tabby.ai/qaseio-playwright-reporter is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

iportwine.com Cross Site Scripting vulnerability OBB-3371559

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting (XSS)

eslint-detailed-reporter is vulnerable to Cross-site Scripting XSS. The vulnerability exists in renderIssue function in template-generator.js because the issue message is not properly escaped when rendering issues which allows an attacker to inject and execute arbitrary JavaScript...

eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

GHSA-4XR4-89M5-46C7 eslint-detailed-reporter vulnerable to cross-site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=1.2.7) +8 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.9.0)

eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =0.0.44-beta, =0.0.2, =0.0.1, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: OSV:GHSA-4XR4-89M5-46C7...

@goboomtown/entities (>=0.0.14-beta, <=0.0.18-beta), @goboomtown/entities-nest (>=0.0.28-beta, <=1.2.7) +8 more potentially affected by CVE-2022-4942 via eslint-detailed-reporter (>=0.6.10, <=0.9.0)

eslint-detailed-reporter NPM version =0.6.10, =0.0.14-beta, =0.0.28-beta, =0.0.9-beta, =0.0.44-beta, =0.0.2, =0.0.1, =1.0.4, =0.4.0, =1.0.0, =1.0.0, =1.0.7 Source cves: CVE-2022-4942 Source advisory: GHSA-4XR4-89M5-46C7...

CVE-2022-4942

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942 mportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

CVE-2022-4942

CVE-2022-4942 affects mportuga eslint-detailed-reporter up to version 0.9.0. The vulnerability is in renderIssue (lib/template-generator.js) where the message argument is not properly escaped, enabling cross-site scripting. Exploitation may be remote. Patch 505c190efd4905990db6207863bdcbd9b1d7e1b...

PT-2023-15928 · Mportuga · Eslint-Detailed-Reporter

Name of the Vulnerable Software and Affected Versions: mportuga eslint-detailed-reporter versions up to 0.9.0 Description: A vulnerability was found in the function renderIssue in the library lib/template-generator.js, which can lead to cross-site scripting when the message argument is manipulate...

eslint-detailed-reporter Cross-site Scripting Vulnerability

eslint-detailed-reporter is a detailed HTML reporting program for ESLINT by the individual developer Marcelo Sauerbrunn Portugal. A cross-site scripting vulnerability exists in eslint-detailed-reporter prior to version 0.9.0, which stems from a security issue in the function renderIssue in the...

CVE-2022-4942: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in the library lib/template-generator.js. The manipulation of the argument message leads to cross site scripting. The attack may be launched...

heinersreuth.de Cross Site Scripting vulnerability OBB-3258154

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...