Skip to content
OpenAdvisories

Package · Debian

node-rollup

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2024-47068

    DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS

    Rollup is a module bundler for JavaScript. Versions prior to 2.79.2, 3.29.5, and 4.22.4 are susceptible to a DOM Clobbering vulnerability when bundling scripts with properties from `import.meta` (e.g., `import.meta.url`) in `cjs`/`umd`/`iife` format. The DOM …

    rollup rollup node-rollup rollup Debian Ubuntu npm