Search for packages
| purl | pkg:npm/edge.js@5.3.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-qjgh-bth3-fkek | Cross-site Scripting A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if `{{ }}` are used. |
CVE-2021-23443
GHSA-55r9-7mf8-m382 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-07T20:47:26.595556+00:00 | GHSA Importer | Fixing | VCID-qjgh-bth3-fkek | https://github.com/advisories/GHSA-55r9-7mf8-m382 | 38.6.0 |
| 2026-06-04T17:27:48.903059+00:00 | GithubOSV Importer | Fixing | VCID-qjgh-bth3-fkek | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-55r9-7mf8-m382/GHSA-55r9-7mf8-m382.json | 38.6.0 |
| 2026-06-02T04:40:03.932371+00:00 | GitLab Importer | Fixing | VCID-qjgh-bth3-fkek | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/edge.js/CVE-2021-23443.yml | 38.6.0 |