-wlq-mxgrapheditor (0.0.0), @amccarthy/mxgraphng (0.1.1) +81 more potentially affected by CVE-2022-40440 via mxgraph (>=4.1.0, <=4.2.2)

mxgraph NPM version =4.1.0, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.1-ba-beta.2, =0.0.1, =0.0.16, =0.0.1, =0.0.3 and more Source cves: CVE-2022-40440 Source advisory: OSV:GHSA-J4RV-PR9G-Q8JV...

CVE-2022-40440

mxGraph version 4.2.2 contains a cross-site scripting (XSS) vulnerability in the setTooltips() function. The provided connected records confirm the flaw but do not include concrete exploit details or official patches within the documents. A PT-2022-25387 entry recommends disabling the setTooltips...