npm/@typebot.io/js — 3 CVEs · VulnScopepkg:npm/@typebot.io/js
共 3 筆 CVEHIGH2MEDIUM1
✅ 檢查你的版本
所有已知漏洞
HIGH8.7CVE-2026-28445Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview from 0, < 0.10.1
HIGH7.4CVE-2025-65098Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass from 0, < 0.9.15
MEDIUM5.4CVE-2026-39964Typebot.io has stored XSS via `javascript`: URI in text bubble links — bot author executes JS on visitors' browsers from 0, < 0.10.1