Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the server island head rendering pipeline in packages/nitro-server/src/runtime/handlers/island.ts, where head entries are serialized without applying the useHeadSafe allowlist. An attacker who can influence...