Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-23416 EUVD-2021-1875GHSA-rqf8-8c89-mw29

Cross-site Scripting (XSS)

Published Jul 28, 2021 · Updated Sep 17, 2024 · Assigned by snyk

Description

This affects all versions of package curly-bracket-parser. When used as a template library, it does not properly sanitize the user input.

Affected products

VendorProductAffectedFixed
— curly-bracket-parser < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm curly-bracket-parser <= 1.0.2 — GHSA-rqf8-8c89-mw29

References