@elastic/app-search-node@0.6.0 vulnerabilities
Elastic App Search Node.js client
-
latest version
8.3.2
-
latest non vulnerable version
-
first published
5 years ago
-
latest version published
2 years ago
-
licenses detected
- >=0.6.0 <7.2.0
Direct Vulnerabilities
Known vulnerabilities in the @elastic/app-search-node package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
@elastic/app-search-node is a Node client for the Elastic App Search. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). They contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be rendered by the web browser. If an attacker is able to control the contents of such a field, they could execute arbitrary JavaScript in the victim's web browser. How to fix Cross-site Scripting (XSS)? Upgrade |
<7.7.0
|