← Back

Nextcloud/dialogs

nextcloud/dialogs

Vendor: Nextcloud/dialogs Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-29438
1Nextcloud/dialogs Project
1Nextcloud/dialogs
Jun 17, 2026
Apr 13, 2021
N/A· v4
5.4 MEDIUM· v3
4.3 MEDIUM· v2
The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vuln...Show more
The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been patched in version 3.1.2 If you need to display HTML in the toast, explicitly pass the `options.isHTML` config flag.Show less