Every CVESearch/Get API key

GHSA-7jfh-2xc9-ccv7

Cross-Site Scripting in public

No scoreFix available

All versions of public are vulnerable to stored cross-site scripting (XSS).

Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

What each source reports

GitHub AdvisoriesNo score

Cross-Site Scripting in public

All versions of public are vulnerable to stored cross-site scripting (XSS).

Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

Record
GHSA-7jfh-2xc9-ccv7
Weakness
CWE-79
Updated
2026-11-02
OSVNo score

Cross-Site Scripting in public

All versions of public are vulnerable to stored cross-site scripting (XSS).

Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

Record
GHSA-7jfh-2xc9-ccv7
Weakness
CWE-79
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
public
npm
before 0.1.4
0.1.4
public
npm
0.1.5 to 0.1.5None known
public
npm
Listed versions
0.1.5
None known

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-7jfh-2xc9-ccv7 is a vulnerability with no CVSS score yet in public, published May 31, 2019. No source lists public exploit code. Fixed in public 0.1.4.

References

MoveEnter Open