100notes-comments (0.1.1), @36node/swagen (>=0.1.2, <=0.18.6) +1508 more potentially affected by unknown CVE via autolinker (>=0.11.2, <=3.1.0)

autolinker NPM version =0.11.2, =0.1.2, =3.2.0, =1.0.11, =9.0.89, =9.0.360, =8.0.475, =9.0.30, =8.0.475, =1.4.156, =0.0.0-oxlint-config-pkg-2-20260409131334, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-3770...

WS-2017-3770

Cross-site Scripting XSS vulnerability was found in autolinker before 3.14.0. User input passed to the innerHTML tags isn't sanitized...

100notes-comments (0.1.1), @36node/swagen (>=0.1.2, <=0.18.6) +1505 more potentially affected by unknown CVE via autolinker (>=0.11.2, <=2.2.2)

autolinker NPM version =0.11.2, =0.1.2, =3.2.0, =1.0.11, =9.0.89, =9.0.360, =8.0.475, =9.0.30, =8.0.475, =1.4.156, =0.0.0-oxlint-config-pkg-2-20260409131334, =0.0.1, =0.0.3 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0540...

WS-2019-0540

Denial of Service DoS vulnerability was found in autolinker before 3.0.0. Unterminated img src causes long execution...

Cross-Site Scripting (XSS)

react-autolinker-wrapper is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser as the library does not validate user input and directly render the user provided data when calling the invokeLink method, allowing the conversion o...

Rocket.Chat: Account takeover via XSS

Summary: By combining AutoLinker and Markdown an attacker is able to inject malicious scripts. Description: By combining AutoLinker and Markdown we can trick the parser into breaking out of the current HTML attribute. https://a?p= results in: html ." target="blank" rel="noopener noreferrer" "...

Node.js third-party modules: Lack of input validation and sanitization in react-autolinker-wrapper library causes XSS

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report XSS in...