cordova-plugin-inappbrowser@1.4.0 vulnerabilities
Cordova InAppBrowser Plugin
-
latest version
6.0.0
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
5 months ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the cordova-plugin-inappbrowser package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
cordova-plugin-inappbrowser is a Cordova InAppBrowser Plugin. Affected versions of this package are vulnerable to Arbitrary Code Execution. A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI. How to fix Arbitrary Code Execution? Upgrade |
<3.1.0
|