GHSA-wc6f-qjxc-622v: Duplicate Advisory: JavaScript execution via malicious molfiles (XSS)

January 19, 2024 (updated January 22, 2026)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-2pwh-52h7-7j84. This link is maintained to preserve external references.

Original Description

MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.

References

github.com/advisories/GHSA-2pwh-52h7-7j84
github.com/advisories/GHSA-wc6f-qjxc-622v
github.com/ipb-halle/MolecularFaces
github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84
nvd.nist.gov/vuln/detail/CVE-2024-0758
vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84

Code Behaviors & Features

Detect and mitigate GHSA-wc6f-qjxc-622v with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →