openmct@3.1.0 vulnerabilities

The Open MCT core platform

Known vulnerabilities in the openmct package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Cross-site Scripting (XSS) openmct is an Open MCT core platform Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in the `FrameComponent.vue` file in `flexibleLayout plugin`. An attacker can run arbitrary code by exploiting this vulnerability. How to fix Cross-site Scripting (XSS)? Upgrade `openmct` to version 3.1.1 or higher.	<3.1.1
M Cross-site Request Forgery (CSRF) openmct is an Open MCT core platform Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) due to improper input sanitization. An attacker can view sensitive information by exploiting this vulnerability. How to fix Cross-site Request Forgery (CSRF)? Upgrade `openmct` to version 3.1.1 or higher.	<3.1.1