Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41415.json"