Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000241

sonatype-2026-000241

Saltcorn - Cross-site Scripting (XSS)

Published Jan 27, 2026

https://github.com/advisories/GHSA-cr3w-cw5w-h3fj

CVSS ScoreCritical

9.7

Ecosystem	Package	Version


npm	@saltcorn/server	1.1.1
npm	@saltcorn/server	1.1.2-beta.0
npm	@saltcorn/server	1.1.2-beta.10
npm	@saltcorn/server	1.1.2-beta.11
npm	@saltcorn/server	1.1.2-beta.12
npm	@saltcorn/server	1.1.2-beta.13
npm	@saltcorn/server	1.1.2-beta.14
npm	@saltcorn/server	1.1.2-beta.15
npm	@saltcorn/server	1.1.2-beta.16
npm	@saltcorn/server	1.1.2-beta.17
npm	@saltcorn/server	1.1.2-beta.18
npm	@saltcorn/server	1.1.2-beta.19
npm	@saltcorn/server	1.1.2-beta.1
npm	@saltcorn/server	1.1.2-beta.2
npm	@saltcorn/server	1.1.2-beta.3
npm	@saltcorn/server	1.1.2-beta.4
npm	@saltcorn/server	1.1.2-beta.5
npm	@saltcorn/server	1.1.2-beta.6
npm	@saltcorn/server	1.1.2-beta.7
npm	@saltcorn/server	1.1.2-beta.8
npm	@saltcorn/server	1.1.2-beta.9
npm	@saltcorn/server	1.1.2
npm	@saltcorn/server	1.1.3-beta.0
npm	@saltcorn/server	1.1.3-beta.10
npm	@saltcorn/server	1.1.3-beta.1
npm	@saltcorn/server	1.1.3-beta.2
npm	@saltcorn/server	1.1.3-beta.3
npm	@saltcorn/server	1.1.3-beta.4
npm	@saltcorn/server	1.1.3-beta.5
npm	@saltcorn/server	1.1.3-beta.6
npm	@saltcorn/server	1.1.3-beta.7
npm	@saltcorn/server	1.1.3-beta.8
npm	@saltcorn/server	1.1.3-beta.9
npm	@saltcorn/server	1.1.3-rc.0
npm	@saltcorn/server	1.1.3
npm	@saltcorn/server	1.1.4-alpha.0
npm	@saltcorn/server	1.1.4-alpha.1
npm	@saltcorn/server	1.1.4-alpha.2
npm	@saltcorn/server	1.1.4-alpha.3
npm	@saltcorn/server	1.1.4-beta.0
npm	@saltcorn/server	1.1.4-beta.10
npm	@saltcorn/server	1.1.4-beta.11
npm	@saltcorn/server	1.1.4-beta.1
npm	@saltcorn/server	1.1.4-beta.2
npm	@saltcorn/server	1.1.4-beta.3
npm	@saltcorn/server	1.1.4-beta.5
npm	@saltcorn/server	1.1.4-beta.6
npm	@saltcorn/server	1.1.4-beta.7
npm	@saltcorn/server	1.1.4-beta.8
npm	@saltcorn/server	1.1.4-beta.9

sonatype-2026-000241 | Components Impacted | Sonatype Guide | Sonatype Guide