Homepage

@grafana/data/.../data@7.0.0-pre.0-705467242d vulnerabilities

Grafana Data Library

  • latest version

    11.4.0

  • latest non vulnerable version

    11.5.0-213408

  • first published

    5 years ago

  • latest version published

    9 days ago

  • licenses detected

  • View data package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @grafana/data package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Cross-site Scripting (XSS)

    @grafana/data is a This package holds the root data types and functions used within Grafana.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when an attacker convince a victim to visit a URL referencing a vulnerable page. The URL is not validated and the AngularJS rendering engine will execute the JavaScript expression contained in the URL.

    How to fix Cross-site Scripting (XSS)?

    Upgrade @grafana/data to version 8.2.3 or higher.

    <8.2.3
    Go back to all versions of this package