CVE-2024-37166: ghtml Cross-Site Scripting (XSS) vulnerability

June 10, 2024

It is possible to introduce user-controlled JavaScript code and trigger a Cross-Site Scripting (XSS) vulnerability in some cases.

References

github.com/advisories/GHSA-vvhj-v88f-5gxr
github.com/gurgunday/ghtml
github.com/gurgunday/ghtml/commit/df1ea50fe8968a766fd2b9379a8f9806375227f8
github.com/gurgunday/ghtml/security/advisories/GHSA-vvhj-v88f-5gxr
nvd.nist.gov/vuln/detail/CVE-2024-37166

Code Behaviors & Features

Detect and mitigate CVE-2024-37166 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →