All products

github.com/vapor/leaf-kit

Swift · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LeafKit allows XSS with untrusted user inputCVE-2021-37634 · GHSA-RV3X-XQ3R-8J9H github.com/vapor/leaf-kit Swift Medium Fix reported
LeafKit's HTML escaping may be skipped for Collection values, enabling XSSCVE-2026-28499 · GHSA-6JJ5-J4J8-8473 github.com/vapor/leaf-kit Swift Medium Fix reported
Leaf-kit html escaping does not work on characters that are part of extended grapheme clusterCVE-2026-27120 · GHSA-4HFH-FCH3-5Q7P github.com/vapor/leaf-kit Swift Medium Fix reported