cbcvebase.

Ansi Up Project Ansi Up vulnerabilities

1 known vulnerability affecting ansi_up_project/ansi_up.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2021-3377P3MEDIUMCVSS 6.1PoCfixed in 5.0.02021-03-05
CVE-2021-3377 [MEDIUM] CWE-79 CVE-2021-3377: The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can b The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0.
ghsanvdosv
Ansi Up Project Ansi Up vulnerabilities | cvebase