VYPR

Snyk Advisor

by Rich Harris

CVEs (1)

  • CVE-2023-1767MedApr 20, 2023
    risk 0.28cvss 4.3epss 0.01

    The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an…