Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-sapk-n2u2-a3de
|
Security researcher Abdulrahman Alqabandi reported that
the fetch() API did not correctly implement the Cross-Origin
Resource Sharing (CORS) specification, allowing a malicious page to access
private data from other origins. Mozilla developer Ben Kelly
independently reported the same issue.
|
CVE-2015-7184
|