Homepage

@asymmetric-effort/specifyjs@0.2.137

A declarative TypeScript UI framework built for performance and simplicity

  • latest version

    1.1.0

  • latest non vulnerable version

    1.1.0

  • first published

    6 months ago

  • latest version published

    2 months ago

  • licenses detected

  • View specifyjs package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @asymmetric-effort/specifyjs package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Information Exposure

    @asymmetric-effort/specifyjs is an A declarative TypeScript UI framework built for performance and simplicity

    Affected versions of this package are vulnerable to Information Exposure in the console.warn process. An attacker can gain insight into internal framework state, such as queue sizes, component names, and query fragments, by viewing messages in the browser console during production use.

    How to fix Information Exposure?

    Upgrade @asymmetric-effort/specifyjs to version 0.2.140 or higher.

    <0.2.140
    Go back to all versions of this package