@asymmetric-effort/specifyjs vulnerabilities (npm)
7 vulnerabilities.
-
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString 5.3 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: No redirect target validation in secureFetch 6.9 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: `data:` URI allowed without size restriction 6.9 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range) 6.9 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: Production console warnings may leak internal framework state 6.9 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection 6.9 Medium -
@asymmetric-effort/specifyjsnpm @asymmetric-effort/specifyjs: URL parse failure silently allows request 8.7 High