Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
devbridge-autocomplete
devbridge-autocomplete vulnerabilities (npm)
1 vulnerability.
devbridge-autocomplete
npm
devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs
GHSA-hvqh-jw65-wcpq
Fix available
5.4
Medium
June 22, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open