- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 medium
- Registry
- npm
Advisories 2
- CVE-2025-56515High 8.8
File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality.
Affected: versions 1.0.0.
- CVE-2025-56514Medium 4.6
Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are…
Affected: versions 1.0.0.