Skip to content
OpenAdvisories

Package · npm

@scrypted/server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.3
    GHSA-w4hv-vmv9-hgcr

    GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`

    # GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219` The [GitHub Security Lab](https://securitylab.github.com) team has identified potential security vulnerabilities in [scrypted](https://github.com/koush/scrypted). We…

    @scrypted/core @scrypted/server npm
  • Medium 6.1
    CVE-2023-47620

    Scrypted reflected Cross-site Scripting vulnerability

    Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.

    koush scrypted @scrypted/server npm