Skip to content
OpenAdvisories

Package · npm

react-dom

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2018-6341 Public exploit

    Cross-Site Scripting in react-dom

    React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x,…

    Facebook react-dom react-dom npm