@tutao/tutanota-utils@253.241203.0
This is a collection of common utils we use across multiple projects/modules internally. As creating this module really is just an intermediate step towards re-organising some of the dependency structure of our software, it is most likely going to change
latest version
345.260421.2
latest non vulnerable version
first published
4 years ago
latest version published
4 months ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @tutao/tutanota-utils package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
@tutao/tutanota-utils is a This is a collection of common utils we use across multiple projects/modules internally. As creating this module really is just an intermediate step towards re-organising some of the dependency structure of our software, it is most likely going to change Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the contact viewer. An attacker can manipulate the appearance and behavior of the link button by injecting specially crafted contact data, causing the link address to be overridden and the button's CSS to be altered, which may result in user clicks being redirected to arbitrary URLs. Note: This is only exploitable if a user imports contacts from untrusted sources and opens them in the contact viewer. How to fix Cross-site Scripting (XSS)? Upgrade | <314.251111.0 |