npm sysend vulnerabilities

Latest npm sysend CVEs

Newest publication first

1. CVE-2022-24762 Exposure of Sensitive Information to an Unauthorized Actor in sysend.js

   Published 2022-03-14

   Medium·CVSS 6.5 EPSS 0.68%

   sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.