Skip to content
OpenAdvisories

Package · npm

jsreport

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2023-2583

    Code Injection in jsreport/jsreport

    Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3.

    jsreport jsreport/jsreport jsreport npm
  • Critical 9.8
    CVE-2020-8128

    Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport

    An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.

    jsreport npm