Homepage

@grafana/data@7.3.0-pre.0-6932b459f5 vulnerabilities

Grafana Data Library

  • latest version

    12.2.0

  • latest non vulnerable version

    12.3.0-18562067081

  • first published

    6 years ago

  • latest version published

    24 days ago

  • licenses detected

  • View data package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @grafana/data package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Cross-site Scripting (XSS)

    @grafana/data is a This package holds the root data types and functions used within Grafana.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when an attacker convince a victim to visit a URL referencing a vulnerable page. The URL is not validated and the AngularJS rendering engine will execute the JavaScript expression contained in the URL.

    How to fix Cross-site Scripting (XSS)?

    Upgrade @grafana/data to version 8.2.3 or higher.

    <8.2.3
    Go back to all versions of this package