MEDIUM6.1
GHSA-hh8v-jmh3-9437
Cross-site scripting in SocksJS-node
Quick fix
GHSA-hh8v-jmh3-9437 — sockjs: upgrade to the fixed version with the command below.
npm install sockjs@0.3.0Details
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.
Are you affected?
Enter the version of the package you're using.