Search for packages
| purl | pkg:npm/public@0.1.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2019-138
Aliases: GHSA-7jfh-2xc9-ccv7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in public. | There are no reported fixed by versions. |
|
GMS-2018-18
|
Path Traversal Public has a path traversal vulnerability. It allows an attacker to read content of arbitrary files on the … |
Vulnerable |
|
npm-373
Aliases: CVE-2018-3731 |
Directory Traversal public static hosting module suffers from a lack of file path sanitization which causes that any file on … |
Vulnerable |
|
npm-405
|
Cross-site Scripting (XSS) - Stored public allows to embed HTML in file names, which (in certain conditions) might lead to … | There are no reported fixed by versions. |
|
GHSA-4vvp-x9h2-x2vf
Aliases: GMS-2020-760 |
Path Traversal in public All versions of `public` are vulnerable to Path Traversal. This vulnerability allows an attacker to access … | There are no reported fixed by versions. |
|
GHSA-7jfh-2xc9-ccv7
|
Cross-Site Scripting in public All versions of `public` are vulnerable to stored cross-site scripting (XSS). ## Recommendation No fix is … |
Vulnerable |
|
GHSA-8p5p-ff7x-hw7q
Aliases: CVE-2018-3747 |
Cross-Site Scripting in public Versions of `public` prior to 0.1.4 are vulnerable to Cross-Site Scripting (XSS). The package fails to … |
Vulnerable Vulnerable |
|
GHSA-649c-x44h-4q7v
Aliases: CVE-2018-16480 |
Tnantoka/public XSS Vulnerability A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in … |
Vulnerable Vulnerable |