3 matches found
GHSA-2GGQ-VFCP-GWHJ Cross-Site Scripting in @hapi/boom
Versions of @hapi/boom prior to 0.3.8 are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser. Recommendation Upgrade to version 0.3.8 or later...
6.5CVSS6.8AI score
SaveExploits0References3
20