Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2017-16043

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-26q7-g57v-mxcp

HTML Injection in shout Affected versions of `shout` do not escape the `/topic` command in messages, and are therefore vulnerable to cross-site scripting. ## Recommendation Update to version 0.50.0 or later.

gitlab/npm/shout/CVE-2017-16043

Injection Vulnerability Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser.