| Package | Affected versions | Patched versions |
|---|---|---|
| codex | < 1.4.0 | 1.4.0 |
A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malicious users to execute arbitrary code via a crafted http code in a .json file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free