Package impact

npm npm / connect

0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2013-7371 unknown 4y ago node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370) debiannpm
CVE-2013-7370 unknown 6y ago node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware debiannpm
CVE-2018-3717 unknown 8y ago connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware. debiannpm