Description
verdaccio before 3.12.0 allows XSS.
Remediation
References
https://github.com/verdaccio/verdaccio/security/advisories/GHSA-78j5-gcmf-vqc8
Related Vulnerabilities
CVE-2018-8718 Vulnerability in maven package org.jenkins-ci.plugins:mailer
CVE-2017-18349 Vulnerability in maven package com.alibaba:fastjson
CVE-2021-4103 Vulnerability in npm package vditor
CVE-2023-47321 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web
CVE-2022-43422 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-utilities