Skip to content
OpenAdvisories

Package · npm

graylog-web-interface

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-9qgh-7pgp-hp7r

    Cross-Site Scripting in graylog-web-interface

    All versions of `graylog-web-interface` are vulnerable to Cross-Site Scripting (XSS). The package fails to escape output on the `TypeAhead` and `QueryInput` components, which may allow attackers to execute arbitrary JavaScript on the victim's browser. ## Reco…

    graylog-web-interface npm