Description
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | smallrye-health | Not-Known | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.smallrye:smallrye-health-ui | < 3.1.2 | 3.1.2 | GHSA-pvc3-wvxr-7cmf |