org.webjars.npm:element-plus@1.0.2-beta.70 vulnerabilities

latest version

2.1.0

first published

4 years ago

latest version published

1 years ago

licenses detected

MIT
[1.0.2-beta.41,)

package registry

View on Maven Central Repository

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:element-plus package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Improper Encoding or Escaping of Output org.webjars.npm:element-plus is an A Component Library for Vue 3 Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the `href` attribute handling in the el-link component. An attacker can execute arbitrary scripts, redirect users to malicious sites, or conduct phishing attacks by supplying crafted URLs containing dangerous protocols or destinations. How to fix Improper Encoding or Escaping of Output? There is no fixed version for `org.webjars.npm:element-plus`.	[0,)
M Cross-site Scripting (XSS) org.webjars.npm:element-plus is an A Component Library for Vue 3 Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the `el-table-column` component, due to improper escape of HTML special characters. How to fix Cross-site Scripting (XSS)? Upgrade `org.webjars.npm:element-plus` to version 2.0.6 or higher.	[,2.0.6)

Improper Encoding or Escaping of Output

org.webjars.npm:element-plus is an A Component Library for Vue 3

Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the href attribute handling in the el-link component. An attacker can execute arbitrary scripts, redirect users to malicious sites, or conduct phishing attacks by supplying crafted URLs containing dangerous protocols or destinations.

How to fix Improper Encoding or Escaping of Output?

There is no fixed version for org.webjars.npm:element-plus.

[0,)

Cross-site Scripting (XSS)

org.webjars.npm:element-plus is an A Component Library for Vue 3

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the el-table-column component, due to improper escape of HTML special characters.

How to fix Cross-site Scripting (XSS)?

Upgrade org.webjars.npm:element-plus to version 2.0.6 or higher.

[,2.0.6)

Go back to all versions of this package