GHSA-7wfq-wmx2-3wr4
Withdrawn Advisory: Home Assistant Frontend XSS Vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | home-assistant-frontend | < 0.57 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
## Withdrawn Advisory
This advisory has been withdrawn because we cannot confirm [home-assistant-frontend](https://www.npmjs.com/package/home-assistant-frontend) is or was ever published to npm.
## Original Description
In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.
References
External links from the advisory. They lead to third-party sites.