GMS-2013-20: Cross-site Scripting

September 11, 2013

This package is vulnerable to Cross-site Scripting (XSS). Strings parsed from the anchor in the address bar were not sanitized, allowing for arbitrary HTML to be embedded into the page.

References

github.com/lsegal/yard/commit/715d6cb462392e610ab751fcfee7b622850fa802

Code Behaviors & Features

Detect and mitigate GMS-2013-20 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →