Skip to content
OpenAdvisories

Package · npm

@yaireo/tagify

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2022-25854

    Cross-site Scripting (XSS)

    This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass a malicious placeholder value to it to fire the XSS payload.

    @yaireo/tagify npm