Skip to content
OpenAdvisories

Package · npm

connect

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2013-7371

    Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware

    node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)

    node-connect node-connect connect npm
  • Medium 5.4
    CVE-2018-3717

    Cross-Site Scripting in connect

    connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.

    HackerOne connect node module connect node-connect Debian npm