org.webjars.bowergithub.knockout:knockout@3.4.2 vulnerabilities
-
latest version
3.5.1
-
latest non vulnerable version
-
first published
6 years ago
-
latest version published
5 years ago
-
licenses detected
- [3.4.2,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.bowergithub.knockout:knockout package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
org.webjars.bowergithub.knockout:knockout is a JavaScript MVVM (a modern variant of MVC) library that makes it easier to create rich, desktop-like user interfaces with JavaScript and HTML. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to not escaping the How to fix Cross-site Scripting (XSS)? Upgrade |
[,3.5.0-beta)
|