Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/yui@3.10.1
purl pkg:npm/yui@3.10.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2013-4940
Aliases:
GHSA-x5hj-47vv-53p8
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … There are no reported fixed by versions.
GHSA-mj87-8xf8-fp4w
Aliases:
CVE-2013-4939
Cross-Site Scripting in yui Affected versions of `yui` are vulnerable to cross-site scripting in the `uploader.swf` and `io.swf` utilities, via …
3.10.3
Vulnerable
3.10.3
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
npm-332
XSS via .swf files YUI is a free, open source JavaScript and CSS framework for building richly interactive web applications. … CVE-2013-4939
CVE-2013-4940
CVE-2013-4941
CVE-2013-4942