CVE-2023-41049

The CVE-2023-41049 entry concerns @dcl/single-sign-on-client (an open-source npm library for SSO). The documented flaw is improper input validation in the init function, which can allow arbitrary JavaScript to be executed when a javascript: prefix is supplied. A patch exists in version 0.1.0, and...