PT-2026-42986
تاريخ النشر
2026-05-14
·
تاريخ التحديث
2026-05-14
الوصف من
CVSS 4.0
5.3
متوسطةالمقاييسAV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Contents of
hydratable promises were not properly stringified, potentially leading to an XSS exploit. You are vulnerable if all of the following is true:- you are using
hydratable(an experimental feature at the time of this report) - you are passing attacker-controlled input such that a synchronous value is hydrated, then a promise value, e.g.
hydratable('someKey', () => [synchronousValue, promiseValue])
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾