Skip to content
OpenAdvisories

Package · npm

cmmn-js-properties-panel

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-vmh4-322v-cfpc

    Cross-Site Scripting in cmmn-js-properties-panel

    Versions of `cmmn-js-properties-panel` prior to 0.8.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. ## Rec…

    cmmn-js-properties-panel npm