Lucene search
K

4 matches found

Snyk
Snyk
added 2026/01/08 8:42 p.m.1 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Meta API in Framework Mode when generating script:ld+json tags during server-side rendering with untrusted content. An attacker can execute arbitrary JavaScript code by injecting malicious input into the...

7.6CVSS5.4AI score0.0001EPSS
Exploits0References2
OSV
OSV
added 2026/01/08 8:42 p.m.4 views

GHSA-3CGP-3XVW-98X8 React Router has XSS Vulnerability

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. !NOTE This does not impact applications using Declarative Mode or Data Mod...

7.6CVSS6.4AI score0.0001EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/01/08 8:42 p.m.24 views

React Router has XSS Vulnerability

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. !NOTE This does not impact applications using Declarative Mode or Data Mod...

7.6CVSS6.5AI score0.0001EPSS
Exploits0References3Affected Software2
Snyk
Snyk
added 2026/01/08 8:42 p.m.1 views

Cross-site Scripting (XSS)

Overview @remix-run/react is a React DOM bindings for Remix Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Meta API in Framework Mode when generating script:ld+json tags during server-side rendering with untrusted content. An attacker can execute arbitrary...

7.6CVSS5.4AI score0.0001EPSS
Exploits0References2
Rows per page
Query Builder