Packagist/yourls/yourls: high 7.1

YOURLS is vulnerable to XSS through JSONP and Callback request parameters

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-6mp4-q625-mxjp
• https://github.com/YOURLS/YOURLS/security/advisories/GHSA-6mp4-q625-mxjp
• https://github.com/YOURLS/YOURLS/commit/b1c6100e0aa6fef58c9c1a394ccc19352c3a480a
• https://github.com/YOURLS/YOURLS

published 2025-12-30T19:34:26Z · modified 2025-12-30T20:06:36.662929Z · JSON