Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-26318
6.1
MEDIUMCVSS v3
Published
February 19, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.
GitHub