VDB
Sign up
MEDIUM6.1

GHSA-488m-6gh8-9j36

bracket-template vulnerable to reflected XSS

Details

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/bracket-template
Introduced in: 0

No fixed version published yet for bracket-template (npm). Pin to a known-safe version or switch to an alternative.

References