Skip to content
OpenAdvisories

Package · npm

repostat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-27612

    Repostat Vulnerable to Reflected Cross-Site Scripting (XSS) via repo prop in RepoCard

    Repostat is a React component to fetch and display GitHub repository info. Prior to version 1.0.1, the `RepoCard` component is vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability occurs because the component uses React's `dangerouslySetInner…

    denpiligrim repostat repostat npm