← Back

Decentraland

decentraland

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Single Sign On Client
single_sign_on_client
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-41049
1Decentraland
1Single Sign On Client
Jun 17, 2026
Sep 1, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the `init` function allows arbitrary javascript to be executed using the `javas...Show more
@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the `init` function allows arbitrary javascript to be executed using the `javascript:` prefix. This vulnerability has been patched on version `0.1.0`. Users are advised to upgrade. Users unable to upgrade should limit untrusted user input to the `init` function.Show less