Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

npm/npm-406

Progress 0 / 0

Advisory Summary

npm/npm-406

Cross-site Scripting (XSS) - Stored There is a Stored XSS vulnerability in glance module. File name, which contains malicious HTML (eg. embedded iframe element or javascript: pseudoprotocol handler in <a> element) allows to execute JavaScript code against any user who opens directory listing contains such crafted file name.

Mitigation Type	Mitigation Data	Mitigation Note