Skip to content
OpenAdvisories

Package · npm

webpack-bundle-analyzer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.3
    GHSA-pgr8-jg6h-8gw6

    Cross-Site Scripting in webpack-bundle-analyzer

    Versions of `webpack-bundle-analyzer` prior to 3.3.2 are vulnerable to Cross-Site Scripting. The package uses `JSON.stringify()` without properly escaping input which may lead to Cross-Site Scripting. ## Recommendation Upgrade to version 3.3.2 or later.

    webpack-bundle-analyzer npm