Skip to content
OpenAdvisories

Product · vapor

leaf-kit

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2021-37634

    LeafKit allows XSS with untrusted user input

    Leafkit is a templating language with Swift-inspired syntax. Versions prior to 1.3.0 are susceptible to Cross-site Scripting (XSS) attacks. This affects anyone passing unsanitised data to Leaf's variable tags. Before this fix, Leaf would not escape any string…

    vapor leaf-kit github.com/vapor/leaf-kit SwiftURL