Skip to content
OpenAdvisories

Package · npm

teddy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2021-23447

    Cross-site Scripting (XSS)

    This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).

    teddy npm