Skip to content

unhead: Streaming SSR `streamKey` injected into inline script without identifier validation

Low severity GitHub Reviewed Published Apr 10, 2026 in unjs/unhead • Updated Apr 10, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts