Skip to content
OpenAdvisories

Package · npm

vis-timeline

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2020-28487

    Cross-site Scripting (XSS)

    This affects the package vis-timeline before 7.4.4. An attacker with the ability to control the items of a Timeline element can inject additional script code into the generated application.

    vis-timeline npm