Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@paperclipai/ui
@paperclipai/ui vulnerabilities (npm)
1 vulnerability.
@paperclipai/ui
npm
Paperclip: Stored XSS via javascript: URLs in MarkdownBody — urlTransform override disables react-markdown sanitization
GHSA-fpw4-p57j-hqmq
Fix available
5.4
Medium
April 16, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open