Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-3481

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cx3j-qqxj-9597

Critters Cross-site Scripting Vulnerability ### Impact Critters version 0.0.17-0.0.19 have an issue when parsing the HTML which leads to a potential cross-site scripting (XSS) https://owasp.org/www-community/attacks/xss/ bug. ### Patches The bug has been fixed in `v0.0.20`. ### Workarounds Upgrading Critters version to `>0.0.20` is the easiest fix. This is a non breaking version upgrade so we recommend all users to use `v0.0.20`.

gitlab/npm/critters/CVE-2023-3481

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in critters.