github_osv/GHSA-v5hp-35hw-cw5x
XSS in client rendered block templates in rendr
Affected versions of `rendr` are vulnerable to cross-site scripting when client side rendering is done inside a `_block`.
Server side rendering is not affected and is properly escaped.
## Recommendation
Update to version 1.1.4 or later.
gitlab/npm/rendr/GMS-2020-765
XSS in client rendered block templates in rendr
Affected versions of `rendr` are vulnerable to cross-site scripting when client side rendering is done inside a `_block`.
Server side rendering is not affected and is properly escaped.
## Recommendation
Update to version 1.1.4 or later.