Vulnerabilities

All ecosystems 2241870 AlmaLinux 5975 Alpaquita 16176 Alpine 4655 Android 3677 Azure Linux 17971 BellSoft Hardened Containers 770 Bitnami 9501 Chainguard 1048510 CleanStart 5235 CRAN 14 crates.io 2763 Debian 68975 Echo 7866 GHC 3 GIT 109056 GitHub Actions 55 Go 9328 Hackage 33 Hex 364 Julia 1713 Linux 29975 Mageia 6237 Maven 7050 MinimOS 148513 npm 229197 NuGet 1869 opam 29 openEuler 8900 openSUSE 14647 OSS-Fuzz 4019 Packagist 7101 Pub 11 PyPI 25464 Red Hat 23535 Rocky Linux 4343 Root 19643 RubyGems 5331 SUSE 23442 SwiftURL 60 TuxCare 9951 Ubuntu 66085 VSCode 21 Wolfi 293807

GHSA-hvqh-jw65-wcpq

npm/devbridge-autocomplete

devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs 22 Jun

Fix available
Severity - 5.4 (Medium)