Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-mdex-e625-ekgm
|
Cross-site Scripting
There is a Stored XSS vulnerability in the glance node module versions. File name, which contains malicious HTML (eg. embedded iframe element or `javascript: pseudo-protocol` handler in `<a>` element) allows to execute JavaScript code against any user who opens a directory listing containing such crafted file name.
|
CVE-2018-3748
|