npm/materialize-css CVE-2022-25349: medium 5.4, EPSS 1.05%

materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7jvx-f994-rfw2
• https://nvd.nist.gov/vuln/detail/CVE-2022-25349
• https://github.com/Dogfalo/materialize
• https://github.com/Dogfalo/materialize/blob/v1-dev/js/autocomplete.js%23L285%20
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2766498
• https://snyk.io/vuln/SNYK-JS-MATERIALIZECSS-2324800

CVE-2022-25349 · published 2022-05-03T00:00:45Z · modified 2023-11-08T04:08:46.546659Z · JSON