Skip to content
OpenAdvisories

Package · npm

solid-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2025-27109

    Lack of Escaping of HTML in JSX Fragments allows for Cross-site Scripting in solid-js

    solid-js is a declarative, efficient, and flexible JavaScript library for building user interfaces. In affected versions Inserts/JSX expressions inside illegal inlined JSX fragments lacked escaping, allowing user input to be rendered as HTML when put directly…

    solidjs solid solid-js npm