All products

@kindspells/astro-shield

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-listsCVE-2024-30250 · GHSA-C4GR-Q97G-PPWC @kindspells/astro-shield npm High Fix reported
Content-Security-Policy header generation in middleware could be compromised by malicious injectionsCVE-2024-29896 · GHSA-W387-5QQW-7G8M @kindspells/astro-shield npm High Fix reported