Homepage

event-source-polyfill@1.0.28

A polyfill for http://www.w3.org/TR/eventsource/

  • latest version

    1.0.31

  • latest non vulnerable version

    1.0.31

  • first published

    12 years ago

  • latest version published

    4 years ago

  • licenses detected

  • View event-source-polyfill package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the event-source-polyfill package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Undesired Behavior

    event-source-polyfill is an A polyfill for http://www.w3.org/TR/eventsource/

    Affected versions of this package are vulnerable to Undesired Behavior. This package geo-locates users based on their IP address and if the user is Russia-based prints a political protest message in the browser 15 seconds after the package is loaded. The package then tries to redirect the browser into another website via the windows.call command.

    Note: This issue affects versions starting with 1.0.26, previous versions other than 1.0.26 are not affected.

    How to fix Undesired Behavior?

    Upgrade event-source-polyfill to version 1.0.29 or higher.

    >=1.0.26 <1.0.29
    Go back to all versions of this package