Description
verdaccio before 3.12.0 allows XSS.
Remediation
References
https://github.com/verdaccio/verdaccio/security/advisories/GHSA-78j5-gcmf-vqc8
Related Vulnerabilities
CVE-2020-29455 Vulnerability in npm package liveaddress
CVE-2021-34428 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2020-7717 Vulnerability in npm package dot-notes
CVE-2022-37264 Vulnerability in npm package steal
CVE-2021-21353 Vulnerability in maven package org.webjars.npm:pug