Skip to content
OpenAdvisories

Package · npm

novu/api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    GHSA-26wg-9xf2-q495

    Novu has a XSS sanitization bypass

    ### Summary XSS sanitization is incomplete, some attributes are missing such as `oncontentvisibilityautostatechange=`. This allows for the email preview to render HTML that executes arbitrary JavaScript, ### Details Sanitization is implemented here: https://g…

    novu/api npm