Skip to content
OpenAdvisories

Package · npm

orejime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 0.6
    CVE-2025-68457

    Orejime has executable code in HTML attributes

    Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime prior to version 2.3.2, one could run malicious code by embedding `javascript:` code within data attributes. When consenting to the related purpose, Orejime would …

    boscop-fr orejime orejime npm