—
GO-2024-2721
Cross site scripting in github.com/tiagorlampert/CHAOS
Details
A malicious actor may be able to extract a JWT token via malicious "/command" request. This is a form of cross site scripting (XSS).
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/tiagorlampert/CHAOS
Introduced in:
0No fixed version published yet for github.com/tiagorlampert/CHAOS (go modules). Pin to a known-safe version or switch to an alternative.