unhead vulnerabilities (npm)
4 vulnerabilities.
-
unheadnpm unhead: Streaming SSR `streamKey` injected into inline script without identifier validation 2.3 Low -
unheadnpm Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe() 6.1 Medium -
unheadnpm Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity 0.0 None -
unheadnpm Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check 5.3 Medium