| Package | Affected versions | Patched versions |
|---|---|---|
| vulcan | ≤ 0.14.3 |
TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free