Skip to content
OpenAdvisories

Package · npm

highlight.run

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    highlight vulnerable to cleartext transmission of sensitive information

    Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which …