Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@cyntler/react-doc-viewer

1 known vulnerability (1 medium), with the versions each affects and the releases that fix them.

Latest release
1.17.1 (Sep 24, 2025): affected by CVE-2026-30691
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1 · 1 medium
Weekly downloads
257.2K
Dependents
46
Releases
52 since 0.1.7 (Apr 15, 2022)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • CVE-2026-30691Medium 6.1

    Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via…

    Affected: through 1.17.1.

    No fix released. The latest release, 1.17.1, is still affected.

    100% of @cyntler/react-doc-viewer downloads last week were affected versions (314.6K).