CVE-2023-1767

CVE-2023-1767 concerns a stored XSS in the Snyk Advisor web app. The component that displays a scanned package’s README on the package health page could execute HTML/JS when end users view the package, allowing an attacker to craft a package with an XSS-enabled README. Root cause: insufficient sa...