Lucene search
+L

1 matches found

OSV
OSV
added 2025/07/26 12:30 a.m.6 views

GHSA-95JQ-XPH2-CX9H Linkify Allows Prototype Pollution & HTML Attribute Injection (XSS)

Prototype Pollution in internal assign helper in Linkify allows remote attackers to execute arbitrary JavaScript Stored or Reflected XSS via injection of event handlers through unfiltered proto property. This issue affects Linkify version 4.3.1 and is fixed in 4.3.2...

8.8CVSS6.1AI score0.00506EPSS
SaveExploits0References7
Rows per page
Query Builder