4.28.0
9 years ago
3 days ago
Known vulnerabilities in the rollup package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
rollup is a Next-generation ES module bundler Affected versions of this package are vulnerable to Cross-site Scripting (XSS) on websites that include rollup-bundled files configured with an output format of An attacker can execute arbitrary scripts in the context of the web page by manipulating HTML elements such as an How to fix Cross-site Scripting (XSS)? Upgrade | >=0.59.0 <2.79.2>=3.0.0 <3.29.5>=4.0.0 <4.22.4 |