7.3
Élevée
CVE-2020-28470 This affects the package @scullyio/scully before 1.0.9
Description
This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify() function and then written into the HTML page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| @scullyio/scully 1.0 | premières → < 1.0.9 | 1.0.9 |