CVE-2019-15482: Cross-site Scripting

August 23, 2019 (updated August 26, 2019)

selectize-plugin-a11y has XSS via the msg field.

References

github.com/SLMNBJ/selectize-plugin-a11y/pull/9
nvd.nist.gov/vuln/detail/CVE-2019-15482

Detect and mitigate CVE-2019-15482 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →