CVE-2025-65098
1 advisory.
npm/@typebot.io/js CVE-2025-65098: high 7.4
Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass
Action: Upgrade @typebot.io/js to 0.9.15 or later.
npm i @typebot.io/js@0.9.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.15 | - |
Fixed versions
| 0.9.15 |
Sources
- osv: GHSA-4xc5-wfwc-jw47
- https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-4xc5-wfwc-jw47
- https://nvd.nist.gov/vuln/detail/CVE-2025-65098
- https://github.com/baptisteArno/typebot.io/commit/a68f0c91790af8f52f17557f4aa202e966e7e579
- https://github.com/baptisteArno/typebot.io
CVE-2025-65098 · published · modified · JSON