Skip to main content
cve.nowby Sazabi
← npm
npmPackage

xo-web

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
npm

Advisories 1

  • Xen Orchestra (with xo-web through 5.80.0 and xo-server through 5.84.0) mishandles authorization, as demonstrated by modified WebSocket…

    Affected: through 5.80.0.