Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-qhjf-hm5j-335w: @urql/next Cross-site Scripting vulnerability

impact

The @urql/next package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns html tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream.

To fix this vulnerability upgrade to version 1.1.1

ghsa
#xss#vulnerability#web#git

@urql/next Cross-site Scripting vulnerability

High severity GitHub Reviewed Published Jan 30, 2024 in urql-graphql/urql • Updated Jan 30, 2024

ghsa: Latest News

GHSA-7p9f-6x8j-gxxp: CRI-O: Maliciously structured checkpoint file can gain arbitrary node access