@typebot.io/js
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers | @typebot.io/js | npm | Medium | Fix reported | |
| Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview | @typebot.io/js | npm | High | Fix reported | |
| Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass | @typebot.io/js | npm | High | Fix reported |