AIKIDO-2024-10298

TL;DR

Affected versions of the package are vulnerable to Cross-site Scripting (XSS). Multiple XSS vulnerabilities exist, such as the possibility of constructing a filename that, when edited, executes a script. Additionally, an attacker can construct a URL like https://localhost/meshagents?key="><script>alert(1)</script><a+ to exploit the vulnerability.