Skip to content
OpenAdvisories

Package · npm

@valtimo/components

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-34706

    @valtimo/components exposes access token to form.io

    Valtimo is an open source business process and case management platform. When opening a form in Valtimo, the access token (JWT) of the user is exposed to `api.form.io` via the the `x-jwt-token` header. An attacker can retrieve personal information from this t…

    valtimo-platform valtimo-frontend-libraries @valtimo/components npm