Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-pgr8-jg6h-8gw6

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pgr8-jg6h-8gw6

Cross-Site Scripting in webpack-bundle-analyzer Versions of `webpack-bundle-analyzer` prior to 3.3.2 are vulnerable to Cross-Site Scripting. The package uses `JSON.stringify()` without properly escaping input which may lead to Cross-Site Scripting. ## Recommendation Upgrade to version 3.3.2 or later.

gitlab/npm/webpack-bundle-analyzer/GMS-2019-67

Cross-Site Scripting in webpack-bundle-analyzer Versions of `webpack-bundle-analyzer` are vulnerable to Cross-Site Scripting. The package uses `JSON.stringify()` without properly escaping input which may lead to Cross-Site Scripting.