Homepage
About Snyk

@grafana/ui@8.4.11 vulnerabilities

Grafana Components Library

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @grafana/ui package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Cross-site Scripting (XSS)

@grafana/ui is a Grafana Components Library

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the core plugin GeoMap, due to SVG-files improper sanitization. Exploiting this vulnerability allowed arbitrary JavaScript to be executed in the context of the currently authorized user of the Grafana instance.

How to fix Cross-site Scripting (XSS)?

Upgrade @grafana/ui to version 8.5.16, 9.3.6 or higher.

>=8.1.0 <8.5.16 >=9.0.0 <9.3.6
Go back to all versions of this package