418sec/huntr
GitHub
Releases0
Stars272
Public Roadmap | huntr.dev
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 5.4 MEDIUM | 3.5 LOW | ||
Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. | |||
| 6.6 MEDIUM | 6.5 MEDIUM | ||
This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function. | |||
| 8.4 HIGH | 4.6 MEDIUM | ||
The issue occurs because tagName user input is formatted inside the exec function is executed without any checks. | |||