devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted inputs
Moderate severity
GitHub Reviewed
Published
May 21, 2026
in
tkirda/jQuery-Autocomplete
•
Updated Jun 22, 2026
Give feedback on Dependabot alerts