Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/glance@0.2.3
purl pkg:npm/glance@0.2.3
Next non-vulnerable version 3.0.9
Latest non-vulnerable version 3.0.9
Risk score 3.9
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2018-3748

Cross-site Scripting There is a Stored XSS vulnerability in the glance node module versions. File name, which contains malicious HTML …
3.0.6
Vulnerable
npm-385
Aliases:
CVE-2018-3715
Path Traversal path traversal in glance static file server allows to read content of arbitrary file
3.0.4
Vulnerable
npm-406

Cross-site Scripting (XSS) - Stored There is a Stored XSS vulnerability in glance module. File name, which contains malicious HTML … There are no reported fixed by versions.
GHSA-3hjh-5hgx-f5wh
Aliases:
CVE-2022-25937
Path traversal vulnerability in glance Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users …
3.0.9
Not vulnerable
GHSA-vw7g-jq9m-3q9v
Aliases:
GMS-2020-725
Unauthorized File Access in glance Versions of `glance` prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides …
3.0.7
Vulnerable
GHSA-7375-vjr2-3g7w
Aliases:
CVE-2018-3748
Cross-Site Scripting in glance Versions of `glance` before 3.0.8 are vulnerable to Stored Cross-Site Scripting (XSS). This is only exploitable …
3.0.8
Vulnerable
3.0.8
Vulnerable
This package is not known to fix any advisories.