Hydra cross-site scripting vulnerability

Hydra is a Nix open source continuous integration service based on the Nix project. A cross-site scripting vulnerability exists in versions prior to Hydra dea1e16, which stems from a malicious package that can inject arbitrary JavaScript code, potentially leading to a cross-site scripting attack...