Skip to content
OpenAdvisories

Package · npm

diagram-js-direct-editing

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-j8r2-2x94-2q67

    Cross-Site Scripting in diagram-js-direct-editing

    Versions of `diagram-js-direct-editing` prior to 1.4.3 are vulnerable to Cross-Site Scripting. The package fails to sanitize input from the clipboard, allowing attackers to execute arbitrary JavaScript in the victim's browser. ## Recommendation Upgrade to ver…

    diagram-js-direct-editing npm