Medium · 6.1 CVE-2022-41376 EUVD-2022-7033GHSA-633r-r4p8-pw3w

Cross site scripting in Metro UI

Published Oct 11, 2022 · Updated May 20, 2025 · Assigned by mitre

Description

Metro UI v4.4.0 to v4.5.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascript function.

Ecosystem	Package	Affected	Fixed	Record
npm	metro4	>= 4.4.0, <= 4.5.1	—	GHSA-633r-r4p8-pw3w