unhead
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| unhead: Streaming SSR `streamKey` injected into inline script without identifier validation | unhead | npm | Low | Fix reported | |
| Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe() | unhead | npm | Medium | Fix reported | |
| Unhead Vulnerable to Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity | unhead | npm | Low | Fix reported | |
| Unhead has XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check | unhead | npm | Medium | Fix reported |