Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-16015

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-vwjj-2852-3765

Cross-Site Scripting in forms Affected versions of `forms` do not properly escape HTML in generated forms, which may result in cross-site scripting. ## Recommendation Update to version 1.3.0 or later.

gitlab/npm/forms/CVE-2017-16015

Cross-site Scripting The forms package does not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to XSS.