Skip to content
OpenAdvisories

Package · npm

bpmn-js-properties-panel

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-vpj4-89q8-rh38

    Cross-Site Scripting in bpmn-js-properties-panel

    Versions of `bpmn-js-properties-panel` prior to 0.31.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. ## Re…

    bpmn-js-properties-panel npm