Security: vapor/leaf-kit
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
HTML escaping may be skipped for Collection values, enabling XSSGHSA-6jj5-j4j8-8473 published
Mar 14, 2026 by gwynneModerate -
Leaf-kit html escaping does not work on characters that are part of extended grapheme clusterGHSA-4hfh-fch3-5q7p published
Feb 18, 2026 by ptoffyModerate -
LeafKit allows XSS with untrusted user inputGHSA-rv3x-xq3r-8j9h published
Aug 7, 2021 by 0xTimModerate