AIKIDO-2024-10167

winglang is vulnerable to Cross-site Scripting

60

Medium

winglang

AIKIDO-2024-10167: winglang is vulnerable to Cross-site Scripting in versions 0.22.0 - 0.76.8.

Cross-site Scripting
Vuln in 0.22.0 - 0.76.8
Fixed in 0.76.9
No CVE available
TL;DR

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the cloud.Function responses in the inspector panel.

Who does this affect?

You're affected if you are using a vulnerable version of the package.

How can it be fixed?

Upgrade winglang library to patch version.

Are you
to these issues?
Connect your GitHub, GitLab, Bitbucket or Azure DevOps account to start scanning your repos for free.
Start For Free
Your data won't be shared · Read-only access
Logo
© 2024 Aikido Security BV | BE0792914919
🇪🇺 Grauwpoort 1, 9000 Ghent, Belgium
🇺🇸 95 Third St, 2nd Fl, San Francisco, CA 94103, US