openstad-react-admin (0.1.29) potentially affected by CVE-2023-25572 via ra-ui-materialui (3.9.5)

ra-ui-materialui NPM version 3.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ra-ui-materialui and may be impacted: - openstad-react-admin 0.1.29 Source cves: CVE-2023-25572 Source advisory: OSV:GHSA-5JCR-82FH-339V...

Cross site scripting

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...

CVE-2023-25572: Improper Neutralization of Input During Web Page Generation

react-admin is a frontend framework for building browser applications on top of REST/GraphQL APIs. react-admin prior to versions 3.19.12 and 4.7.6, along with ra-ui-materialui prior to 3.19.12 and 4.7.6, are vulnerable to cross-site scripting. All React applications built with react-admin and usi...