1.3.2
7 years ago
2 years ago
Known vulnerabilities in the org.webjars.bowergithub.vaadin:vaadin-menu-bar package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to missing output sanitization in test sources. It allows remote attackers to execute malicious JavaScript in the browser by opening a crafted URL. How to fix Cross-site Scripting (XSS)? Upgrade | [1.0.0,1.2.1) |