seajs Cross-site Scripting vulnerability

Description

Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package

Recommendation

No fix is available yet. Followings are affected versions:

• <= 2.2.3

References

• GHSA-pfr4-4397-3hg8
• CVE-2024-51091
• CWE-79
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Deserialization of Untrusted Data in bson - CVE-2020-7610
• XSS vulnerability that affects bootstrap - CVE-2018-20676
• Server-Side Template Injection in formio - CVE-2020-28246
• Path traversal in webpack-dev-middleware - CVE-2024-29180

Tags:

npm

seajs