Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-9xr8-8hmc-389f

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9xr8-8hmc-389f

Cross-Site Scripting in vant Versions of `vant` prior to 2.1.8 are vulnerable to Cross-Site Scripting. The text value of the `Picker` component column is not sanitized, which may allow attackers to execute arbitrary JavaScript in a victim's browser. ## Recommendation Upgrade to version 2.1.8 or later.

gitlab/npm/vant/GMS-2019-65

Cross-Site Scripting in vant Versions of `vant` are vulnerable to Cross-Site Scripting. The text value of the `Picker` component column is not sanitized, which may allow attackers to execute arbitrary JavaScript in a victim's browser. Upgrade to or later.