- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 high, 1 medium
- Weekly downloads
- 4,341
- Dependents
- 1
- Registry
- npm
Advisories 3
- CVE-2026-39964Medium 5.4
TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers
Affected: fixed in 0.10.1.
- CVE-2026-28445High 8.7
Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview
Affected: fixed in 0.10.1.
- CVE-2025-65098High 7.4
Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass
Affected: fixed in 0.9.15.