Skip to content
OpenAdvisories

Package · npm

gmail-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2016-1000228

    DOM-based XSS in gmail-js

    Affected versions of `gmail-js` are vulnerable to cross-site scripting in the `tools.parse_response`, `helper.get.visible_emails_post`, and `helper.get.email_data_post` functions, which pass user input directly into the Function constructor. ## Recommendation…

    gmail-js npm