Skip to content
OpenAdvisories

Package · npm

console-feed

1 known vulnerabilities.

1 result · Feed

  • High —

    Cross-Site Scripting in console-feed

    Versions of `console-feed` prior to 2.8.10 are vulnerable to Cross-Site Scripting (XSS). The package fails to properly escape the rendered output. If an application uses `console-feed` and a malicious JavaScript payload was passed to a `console.log('%_', payl…