Skip to content
OpenAdvisories

Package · npm

workflow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    GHSA-9r75-g2cr-3h76

    Vercel Workflow Allows Webhook Creation with Predictable User-Specified Tokens

    `createWebhook()` in Vercel Workflow DevKit accepts a user-specified `token` parameter that serves as the credential for the public webhook endpoint `/.well-known/workflow/v1/webhook/{token}`. Official documentation recommended predictable token patterns, mak…

    @workflow/core workflow npm