Lucene search
+L

3 matches found

OSV
OSV
added 2020/09/04 5:33 p.m.15 views

GHSA-2GGQ-VFCP-GWHJ Cross-Site Scripting in @hapi/boom

Versions of @hapi/boom prior to 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 0.3.8 or later...

6.5CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder