AIKIDO-2025-10300

TL;DR

Affected versions of this package are vulnerable to client-side injection attacks due to unsanitized return URLs stored in the user session. An attacker could craft a malicious URL and pass it as the returnUrl parameter, which would then be stored in the session and later used for rendering. If the application blindly trusts this URL, it could lead to arbitrary JavaScript execution or trick users into visiting a malicious site.