| Package | Affected versions | Patched versions |
|---|---|---|
| powertip.ts | < 2025-03-27 | 2025-03-27 |
powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free