Homepage
About Snyk

nodebb vulnerabilities

NodeBB Forum

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the nodebb package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Access Restriction Bypass

*
  • H
Improper Handling of Unexpected Data Type

*
  • M
Cross-site Request Forgery (CSRF)

*
  • H
Cryptographic Issues

*
  • H
Prototype Pollution

*
  • H
Improper Authentication

*
  • H
Directory Traversal

*
  • H
Improper Authorization

>=1.12.2 <1.14.3
  • M
Cross-site Scripting (XSS)

<0.8.2
  • M
Arbitrary Code Execution

>=0.4.3 <1.4.1
  • M
Cross-site Scripting (XSS)

>=0.6.1 <0.7.0

Package versions

1 - 6 of 6 Results
version published direct vulnerabilities
1.4.0 12 Dec, 2016
  • 0
    C
  • 5
    H
  • 3
    M
  • 0
    L
0.8.2 25 Sep, 2015
  • 0
    C
  • 5
    H
  • 3
    M
  • 0
    L
0.7.0 24 May, 2015
  • 0
    C
  • 5
    H
  • 4
    M
  • 0
    L
0.6.1 7 Feb, 2015
  • 0
    C
  • 5
    H
  • 5
    M
  • 0
    L
0.6.1-dev 23 Jan, 2015
  • 0
    C
  • 5
    H
  • 4
    M
  • 0
    L
0.4.3 24 Jun, 2014
  • 0
    C
  • 5
    H
  • 4
    M
  • 0
    L