MEDIUM6.1npm
GHSA-pxpf-v376-7xx5· CVE-2022-25854, SNYK-JS-YAIREOTAGIFY-2404358tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Modified: 7/8/2026
package
pkg:npm/%40yaireo/tagify
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Modified: 7/8/2026