smartbanner.js rel noopener vulnerability

Description

No description available.

Recommendation

Update the smartbanner.js package to the latest compatible version. Followings are version details:

• Affected version(s): < 1.14.1
• Patched version(s): 1.14.1

References

• GHSA-9mrq-cjgh-32g2
• CVE-2025-25300
• CWE-601
• CWE-79
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking - CVE-2025-25285
• @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Back - CVE-2025-25288
• Parse Server has an OAuth login vulnerability - CVE-2025-30168
• gifplayer XSS vulnerability - CVE-2025-31128

Tags:

npm

smartbanner.js