12 matches found
EUVD-2025-5526
Malicious code in bioql PyPI...
Cross-Site Scripting (XSS)
Seajs is vulnerable to Cross-Site Scripting. The vulnerability is due to improper input sanitization in the seajs package, allowing users to inject scriptless HTML tags with unsanitized name attributes...
CVE-2024-51091
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
anima-pull2load (>=1.0.1 <=1.0.3), bem-register (>=1.0.0 <=1.0.5) +11 more potentially affected by CVE-2024-51091 via seajs (>=1.2.1 <=2.2.1)
seajs NPM version =1.2.1, =1.0.1, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.0.1, =0.0.1, =1.0.7, =0.9.11, =1.1.0, =1.1.3 Source cves: CVE-2024-51091 Source advisory: OSV:GHSA-PFR4-4397-3HG8...
GHSA-PFR4-4397-3HG8 seajs Cross-site Scripting vulnerability
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
seajs Cross-site Scripting vulnerability
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
CVE-2024-51091
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
CVE-2024-51091
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
CVE-2024-51091
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
CVE-2024-51091
Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package...
CVE-2024-51091
CVE-2024-51091 affects seaw.js (seajs) v2.2.3. The issue is a Cross-Site Scripting vulnerability arising from improper input sanitization in the seajs package, enabling a remote attacker to execute arbitrary code via the vulnerable component. Several connected sources corroborate the vulnerabilit...
Sea.js 跨站脚本漏洞
Sea.js is a web module loader open-sourced by Sea.js. A security vulnerability exists in Sea.js version 2.2.3, which originates from cross-site scripting and allows remote attackers to execute arbitrary code via the seajs package...