Search for packages
| purl | pkg:npm/shout@0.50.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-6231-kupz-nqbf | HTML Injection Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. |
GMS-2015-2
|
| VCID-sg4z-2ngp-wqfg | HTML Injection in shout |
CVE-2017-16043
GHSA-26q7-g57v-mxcp |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T15:40:34.027114+00:00 | GitLab Importer | Fixing | VCID-sg4z-2ngp-wqfg | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/shout/CVE-2017-16043.yml | 38.6.0 |
| 2026-06-12T15:39:12.029975+00:00 | GitLab Importer | Fixing | VCID-6231-kupz-nqbf | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/shout/GMS-2015-2.yml | 38.6.0 |
| 2026-06-12T08:10:08.115936+00:00 | GithubOSV Importer | Fixing | VCID-sg4z-2ngp-wqfg | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-26q7-g57v-mxcp/GHSA-26q7-g57v-mxcp.json | 38.6.0 |
| 2026-06-11T20:24:48.080402+00:00 | GHSA Importer | Fixing | VCID-sg4z-2ngp-wqfg | https://github.com/advisories/GHSA-26q7-g57v-mxcp | 38.6.0 |