| Package | Affected versions | Patched versions |
|---|---|---|
| lucy-xss-filter | < 2025-06-08 | 2025-06-08 |
lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free