Skip to content
OpenAdvisories

Package · npm

@saltcorn/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.7
    GHSA-wxf3-4fvj-vqqx

    Unsafe plugins can be installed via pack import by tenant admins

    ### Summary Unsafe plugins (for instance `sql-list`) can be installed in subdomain tenants via pack import even if unsafe plugin installation for tenants is disables ### Details I have an example https://bot20230704.saltcorn.com/view/all_plugins It's publicly…

    @saltcorn/cli npm