npm/unhead: low
unhead: Streaming SSR `streamKey` injected into inline script without identifier validation
Action: Upgrade unhead to 3.0.1 or later.
npm i unhead@3.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0-beta.5 | 3.0.1 | - |
Fixed versions
| 3.0.1 |
Sources
- osv: GHSA-x7mm-9vvv-64w8
- https://github.com/unjs/unhead/security/advisories/GHSA-x7mm-9vvv-64w8
- https://github.com/unjs/unhead/commit/64b5ac0aa30cc256ea6677ce3dc4f132f81b2ff6
- https://github.com/unjs/unhead
published · modified · JSON