Skip to content
OpenAdvisories

Package · npm

@risingstack/protect

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2018-1000160

    Cross-Site Scripting in @risingstack/protect

    RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of X…

    @risingstack/protect npm