CVE-2025-27109
1 advisory.
npm/solid-js CVE-2025-27109: high 7.3, EPSS 0.33%
Solid Lacks Escaping of HTML in JSX Fragments allows for Cross-Site Scripting (XSS)
Action: Upgrade solid-js to 1.9.4 or later.
npm i solid-js@1.9.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.4 | - |
Fixed versions
| 1.9.4 |
Sources
- osv: GHSA-3qxh-p7jc-5xh6
- https://github.com/solidjs/solid/security/advisories/GHSA-3qxh-p7jc-5xh6
- https://nvd.nist.gov/vuln/detail/CVE-2025-27109
- https://github.com/solidjs/solid/commit/b93956f28ed75469af6976a98728e313d0edd236
- https://github.com/solidjs/solid
CVE-2025-27109 · published · modified · JSON