Skip to content
OpenAdvisories

Package · npm

snekserve

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-hv4w-jhcj-6wfw

    Cross-Site Scripting in snekserve

    All versions of `snekserve` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. ## Recommendation…

    snekserve npm