CVE-2025-46233

6.5

MEDIUMCVSS v3

Published

April 22, 2025

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.This issue affects Sirv: from n/a through <= 7.5.3.

sirv

NPMThe optimized & lightweight middleware for serving requests to static assets

< 7.5.4NVD

lukeed/sirv

GitHubAn optimized middleware & CLI application for serving static files~!

< 7.5.4NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2025-46233

Description

More on this CVE