Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

Serenity.Net.Core

4 known vulnerabilities (1 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 3 medium
Registry
NuGet

Advisories 4

  • CVE-2024-26318Medium 6.1

    Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

    Affected: fixed in 6.8.0.

  • An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

    Affected: fixed in 6.7.0.

  • CVE-2023-31286Medium 5.3

    An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

    Affected: fixed in 6.7.0.

  • CVE-2023-31285Medium 6.1

    An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

    Affected: fixed in 6.7.0.