Skip to content
OpenAdvisories

Package · npm

buttle

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium —
    GHSA-pqpp-2363-649v

    Cross-Site Scripting in buttle

    All versions of `buttle` are vulnerable to Cross-Site Scripting. Due to misconfiguration of its rendering engine, `buttle` does not sanitize the HTML output allowing attackers to run arbitrary JavaScript when processing malicious markdown files. ## Recommenda…

    buttle npm
  • High —
    CVE-2019-5422

    Cross-Site Scripting in buttle

    XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.

    npm buttle buttle npm
  • High 7.5
    CVE-2018-3766

    Path Traversal in buttle

    Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

    https://github.com/jtrussell buttle buttle npm