Description
verdaccio before 3.12.0 allows XSS.
Remediation
References
https://github.com/verdaccio/verdaccio/security/advisories/GHSA-78j5-gcmf-vqc8
Related Vulnerabilities
CVE-2023-40037 Vulnerability in maven package org.apache.nifi:nifi-jms-processors
CVE-2021-21162 Vulnerability in npm package electron
CVE-2022-0613 Vulnerability in npm package urijs
CVE-2021-23413 Vulnerability in npm package jszip
CVE-2022-1243 Vulnerability in maven package org.webjars.npm:urijs