aFarkas/lazysizes

aFarkas/lazysizes

Registry
GitHubGitHub
Releases106
Frequency3 weeks 1 day
Last Release
Stars17.7K
High performance and SEO friendly lazy loader for images (responsive and normal), iframes and more, that detects any visibility changes triggered through user interaction, CSS or JavaScript without configuration.

CVE History

CVEPublishedCVSS v2CVSS v3
CVE-2020-76425.4 MEDIUM3.5 LOW
lazysizes through 5.2.0 allows execution of malicious JavaScript. The following attributes are not sanitized by the video-embed plugin: data-vimeo, data-vimeoparams, data-youtube and data-ytparams which can be abused to inject malicious JavaScript.