org.webjars:reveal.js@3.0.0 vulnerabilities

3.0.0

9 years ago

9 years ago

Direct Vulnerabilities

Known vulnerabilities in the org.webjars:reveal.js package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) org.webjars:reveal.js is a framework for easily creating presentations using HTML. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to missing `postMessage` origin verification before adding the content to the webpage. The vulnerable component is the `onmessage` event listener in `/plugin/notes/speaker-view.html`. How to fix Cross-site Scripting (XSS)? There is no fixed version for `org.webjars:reveal.js`.	[0,)
C Cross-site Scripting (XSS) org.webjars:reveal.js is a framework for easily creating presentations using HTML. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the `postMessage` API. How to fix Cross-site Scripting (XSS)? There is no fixed version for `org.webjars:reveal.js`.	[0,)
M Insecure Randomness org.webjars:reveal.js is a framework for easily creating presentations using HTML. Affected versions of this package are vulnerable to Insecure Randomness. Authorisation tokens are generated using `math.random` which can be predicted. How to fix Insecure Randomness? There is no fixed version for `org.webjars:reveal.js`.	[0,)