2 matches found
GHSA-MH2X-FCQH-FMQV @sveltejs/kit has unescaped error message included on error page
Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. Details From https://kit.svelte.dev/docs/errors: error.html is the page that is rendered when everything else fails. It can contain the following placeholders:...
PT-2023-35713 · Git +1 · P11-Kit
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves functions such as base C MessageEncryptInit, r...