Skip to content
OpenAdvisories

Package · npm

rendr

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2016-1000230

    XSS in client rendered block templates in rendr

    Affected versions of `rendr` are vulnerable to cross-site scripting when client side rendering is done inside a `_block`. Server side rendering is not affected and is properly escaped. ## Recommendation Update to version 1.1.4 or later.

    rendr npm