@openc3/tool-common@5.4.1 vulnerabilities

5.20.0

2 years ago

5 months ago

Direct Vulnerabilities

Known vulnerabilities in the @openc3/tool-common package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cleartext Storage of Sensitive Information @openc3/tool-common is a Documentation Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information due to the storage of user credentials in an unencrypted format in the LocalStorage of a web browser. How to fix Cleartext Storage of Sensitive Information? Upgrade `@openc3/tool-common` to version 5.19.0 or higher.	<5.19.0
M Cross-site Scripting (XSS) @openc3/tool-common is a Documentation Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the login functionality. Note: This only affects Open Source Edition and not OpenC3 COSMOS Enterprise Edition. How to fix Cross-site Scripting (XSS)? Upgrade `@openc3/tool-common` to version 5.19.0 or higher.	<5.19.0