Skip to content
OpenAdvisories

Package · npm

@leanprover/unicode-input-component

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • None 0.0
    CVE-2026-32732

    XSS in @leanprover/unicode-input-component

    Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable to an XSS exploit in 0.1.9 of the package and lower. The component re-inserted text in the input el…

    leanprover vscode-lean4 @leanprover/unicode-input-component npm