Skip to content
OpenAdvisories

Package · npm

helmet-csp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-c3m8-x3cg-qm2c

    Configuration Override in helmet-csp

    Versions of `helmet-csp` before to 2.9.1 are vulnerable to a Configuration Override affecting the application's Content Security Policy (CSP). The package's browser sniffing for Firefox deletes the `default-src` CSP policy, which is the fallback policy. This …

    helmet-csp npm