Skip to content
OpenAdvisories

Package · npm

fiora

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2025-56514 Public exploit

    Fiora chat user avatar is vulnerable to XSS via SVG files

    Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are rendered by other users.

    fiora npm