Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/yui@3.10.0
purl pkg:npm/yui@3.10.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2013-4940
Aliases:
GHSA-x5hj-47vv-53p8
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … There are no reported fixed by versions.
GHSA-x5hj-47vv-53p8
Aliases:
CVE-2013-4940
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … There are no reported fixed by versions.
GHSA-mj87-8xf8-fp4w
Aliases:
CVE-2013-4939
Cross-Site Scripting in yui Affected versions of `yui` are vulnerable to cross-site scripting in the `uploader.swf` and `io.swf` utilities, via …
3.10.3
Vulnerable
3.10.3
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2013-4939
XSS via .swf files In the vulnerable versions, the `uploader.swf` and `io.swf` utilities contain a vulnerability allowing cross-site scripting through …