logo

Database

Reflected cross-site scripting (XSS) In @openzeppelin/contracts

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-461512. NVD-2022-461513. OSV-2022-461514. GCVE-2022-461515. GHSA-mrrw-9wf7-xq6w

References

1. https://github.com/pinterest/querybook/commit/88a7f10495bf5ed1a556ade51a2f2794e403c063

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.