Search for packages
| purl | pkg:npm/yui@3.9.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-64r3-582j-frqm
Aliases: CVE-2013-4941 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through … | There are no reported fixed by versions. |
|
GHSA-9ww8-j8j2-3788
Aliases: CVE-2013-4942 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through … | There are no reported fixed by versions. |
|
npm-332
Aliases: CVE-2013-4939 CVE-2013-4940 CVE-2013-4941 CVE-2013-4942 |
XSS via .swf files YUI is a free, open source JavaScript and CSS framework for building richly interactive web applications. … |
Vulnerable Vulnerable |
|
CVE-2013-4939
|
XSS via .swf files In the vulnerable versions, the `uploader.swf` and `io.swf` utilities contain a vulnerability allowing cross-site scripting through … |
Vulnerable Vulnerable |
|
CVE-2013-4940
Aliases: GHSA-x5hj-47vv-53p8 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … | There are no reported fixed by versions. |
|
GHSA-x5hj-47vv-53p8
Aliases: CVE-2013-4940 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … | There are no reported fixed by versions. |
|
GHSA-mj87-8xf8-fp4w
Aliases: CVE-2013-4939 |
Cross-Site Scripting in yui Affected versions of `yui` are vulnerable to cross-site scripting in the `uploader.swf` and `io.swf` utilities, via … |
Vulnerable Vulnerable |