Medium severity6.5OSV Advisory· Published Jun 19, 2025· Updated Apr 15, 2026
CVE-2025-50183
CVE-2025-50183
Description
OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. This leads to a stored XSS vulnerability. This issue has been patched in version 4.0.0-rc.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@openlist-frontend/openlist-frontendnpm | < 4.0.0-rc.4 | 4.0.0-rc.4 |
Affected products
2- Range: v0.0.0, v4.0.0-rc.1, v4.0.0-rc.2, …
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.