@asymmetric-effort/specifyjs
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range) | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: No redirect target validation in secureFetch | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: Production console warnings may leak internal framework state | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: `data:` URI allowed without size restriction | @asymmetric-effort/specifyjs | npm | Medium | Fix reported | |
| @asymmetric-effort/specifyjs: URL parse failure silently allows request | @asymmetric-effort/specifyjs | npm | High | Fix reported |