MEDIUM6.1
GHSA-vwjj-2852-3765
Cross-Site Scripting in forms
Quick fix
GHSA-vwjj-2852-3765 — forms: upgrade to the fixed version with the command below.
npm install forms@1.3.0Details
Affected versions of `forms` do not properly escape HTML in generated forms, which may result in cross-site scripting.
## Recommendation
Update to version 1.3.0 or later.
Are you affected?
Enter the version of the package you're using.