Skip to main content
cve.nowby Sazabi
← npm
npmPackage

cordova-plugin-inappbrowser

2 known vulnerabilities (1 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical
Weekly downloads
80.7K
Dependents
4
Registry
npm

Advisories 2

  • CVE-2026-47430Critical 9.5

    Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews

    Affected: from 3.1.0, through 6.0.0; fixed in 6.0.1.

  • A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a…

    Affected: fixed in 3.1.0.