Cross-Site Scripting (XSS)

metro4 is vulnerable to cross-site scripting. The vulnerability exists in multiple functions because the user inputs are not properly sanitized before rendering in the textarea component which allows an attacker to inject and execute arbitrary JavaScript...

Regular Expression Denial Of Service (ReDoS)

metro4 is vulnerable to regeular expression denial of service. An attacker is able to cause a denial of service condition by submitting a malicious URL which would take a long time to parse...