@cllu/awp-sw (0.4.4) potentially affected by CVE-2025-58765 via @webrecorder/wabac (2.17.3)

@webrecorder/wabac NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on @webrecorder/wabac and may be impacted: - @cllu/awp-sw 0.4.4 Source cves: CVE-2025-58765 Source advisory: OSV:GHSA-W765-JM6W-4HHJ...

CVE-2025-58765

wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...

@cllu/awp-sw (0.4.4) potentially affected by CVE-2025-58765 via @webrecorder/wabac (2.17.3)

@webrecorder/wabac NPM version 2.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on @webrecorder/wabac and may be impacted: - @cllu/awp-sw 0.4.4 Source cves: CVE-2025-58765 Source advisory: SNYK:JS-WEBRECORDERWABAC-12670884...