Cross-site Scripting (XSS)

Overview @tutao/otest is a little test runner Affected versions of this package are vulnerable to Cross-site Scripting XSS via the contact viewer. An attacker can manipulate the appearance and behavior of the link button by injecting specially crafted contact data, causing the link address to be...

@tutao/tutanota-test-utils (>=314.251028.1, <=314.251030.0) potentially affected by unknown CVE via @tutao/otest (>=314.251028.1, <=314.251030.0)

@tutao/otest NPM version =314.251028.1, =314.251028.1, =314.251030.0 Source cves: unknown CVE Source advisory: SNYK:JS-TUTAOOTEST-14545441...