| Package | Affected versions | Patched versions |
|---|---|---|
| Serenity.Net.Core | < 6.8.0 | 6.8.0 |
| serenity | < 6.8.0 | 6.8.0 |
| @serenity-is/corelib | < 6.8.0 | 6.8.0 |
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free