Description
The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting (XSS) vulnerability in files it serves.
Remediation
References
https://hackerone.com/reports/507159
Related Vulnerabilities
CVE-2020-8175 Vulnerability in npm package jpeg-js
CVE-2010-1330 Vulnerability in maven package org.jruby.jcodings:jcodings
CVE-2021-21278 Vulnerability in npm package rsshub
CVE-2021-21429 Vulnerability in maven package org.openapitools:openapi-generator-maven-plugin
CVE-2020-11996 Vulnerability in maven package org.apache.tomcat:tomcat-coyote