VYPR
High severityGHSA Advisory· Published Sep 1, 2020· Updated Sep 23, 2021

Cross-Site Scripting in emojione

CVE-2016-1000231

Description

Affected versions of emojione are vulnerable to cross-site scripting when user input is passed into the toShort(), shortnameToImage(), unicodeToImage(), and toImage() functions.

Recommendation

Update to version 1.3.1 or later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
emojionenpm
< 1.3.11.3.1

Affected products

2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.