Skip to content
OpenAdvisories

Package · npm

dmn-js-properties-panel

1 known vulnerabilities.

1 result · Feed

  • High —

    Cross-Site Scripting in dmn-js-properties-panel

    Versions of `dmn-js-properties-panel` prior to 0.8.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. ## Reco…