Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-j8r2-2x94-2q67

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j8r2-2x94-2q67

Cross-Site Scripting in diagram-js-direct-editing Versions of `diagram-js-direct-editing` prior to 1.4.3 are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. ## Recommendation Upgrade to version 1.4.3 or later.

gitlab/npm/diagram-js-direct-editing/GMS-2020-227

Cross-Site Scripting in diagram-js-direct-editing Versions of `diagram-js-direct-editing` are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. Upgrade to or later.