Medium CVE-2016-1000240 GHSA-gvg7-pp82-cff3

Cross-Site Scripting in c3

Published Sep 1, 2020 · Updated Nov 8, 2023 · Assigned by GHSA

Package: c3 Ecosystem: npm

Description

Affected versions of `c3` are vulnerable to cross-site scripting via improper sanitization of HTML in rendered tooltips.

## Recommendation

Update to 0.4.11 or later.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	c3	< 0.4.11	0.4.11	GHSA-gvg7-pp82-cff3

References