This repository has been archived by the owner on Oct 25, 2024. It is now read-only.

Critical CSS inlining XSS Vulnerability Advisory

High

janicklas-ralph published GHSA-cx3j-qqxj-9597

Aug 9, 2023

Package

critters (npm)

Affected versions

0.0.17-0.0.19

Patched versions

0.0.20

Description

Impact

Critters version 0.0.17-0.0.19 have an issue when parsing the HTML which leads to a potential cross-site scripting (XSS) bug.

Patches

The bug has been fixed in v0.0.20.

Workarounds

Upgrading Critters version to >0.0.20 is the easiest fix. This is a non breaking version upgrade so we recommend all users to use v0.0.20.