@serenity-is/corelib

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2024-26318

Cross-site Scripting in Serenity

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

Serenity.Net.Core @serenity-is/corelib npm NuGet

Feb 19, 2024