Malicious code in phoebe-grus-semantic-ui-algol (npm)

The package phoebe-grus-semantic-ui-algol was found to contain malicious code...

Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)

The package semantic-ui-nestjs-ionosphere-terser-webpack-plugin was found to contain malicious code...

MAL-2025-28666 Malicious code in paleobotany-winston-interstellarmedium-semantic-ui (npm)

The package paleobotany-winston-interstellarmedium-semantic-ui was found to contain malicious code...

MAL-2025-32932 Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm)

The package semantic-ui-nestjs-ionosphere-terser-webpack-plugin was found to contain malicious code...

GHSA-P9VV-3945-X93H Cross-Site Scripting in semantic-ui-search

All versions of semantic-ui-search are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

Cross-Site Scripting in semantic-ui-search

All versions of semantic-ui-search are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

Cross-Site Scripting

Overview All versions of semantic-ui-search are vulnerable to Cross-Site Scripting. Lack of output encoding on the selection dropdowns can lead to user input being executed instead of printed as text. Recommendation No fix is currently available. Consider using an alternative module until a fix i...

Cross-site Scripting (XSS)

Semantic-UI is vulnerable to cross-site scripting XSS attacks. When adding the data-text option as a dropdown item, arbitrary script can be executed when a user clicks on the dropdown item...

Cross-site Scripting (XSS)

semantic-ui is vulnerable to cross-site scripting XSS attacks. The attacks are possible because it allows the users to enter their own entry to a multi select, allowing the user to escape outside of the selector...