~ / search / GHSA-w4wq-rvmq-77x7

GHSA-w4wq-rvmq-77x7

Cross-site scripting in anchorme

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23411

Packages

EcosystemPackageAffectedFixed in
npm anchorme <= 2.1.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package anchorme are vulnerable to Cross-site Scripting (XSS) via the main functionality.

References

External links from the advisory. They lead to third-party sites.