Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/public@0.1.4
purl pkg:npm/public@0.1.4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GMS-2019-138
Aliases:
GHSA-7jfh-2xc9-ccv7
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in public. There are no reported fixed by versions.
GHSA-4vvp-x9h2-x2vf
Aliases:
GMS-2020-760
Path Traversal in public All versions of `public` are vulnerable to Path Traversal. This vulnerability allows an attacker to access … There are no reported fixed by versions.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
GHSA-7jfh-2xc9-ccv7
Cross-Site Scripting in public All versions of `public` are vulnerable to stored cross-site scripting (XSS). ## Recommendation No fix is …
GHSA-8p5p-ff7x-hw7q
Cross-Site Scripting in public Versions of `public` prior to 0.1.4 are vulnerable to Cross-Site Scripting (XSS). The package fails to … CVE-2018-3747
GHSA-649c-x44h-4q7v
Tnantoka/public XSS Vulnerability A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in … CVE-2018-16480