Skip to content
OpenAdvisories

Package · npm

bracket-template

2 known vulnerabilities.

2 results · Feed

  • High —

    Cross-Site Scripting in bracket-template

    All versions of `bracket-template` are vulnerable to stored cross-site scripting (XSS). This is exploitable when a variable passed in via a GET parameter is used in a template. ## Recommendation No fix is currently available for this vulnerability. It is our …

  • Medium 6.1

    bracket-template vulnerable to reflected XSS

    bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template