Overview · NaturalIntelligence/is-unsafe · GitHub

Repository navigation

Security

No security policy detected

This project has not set up a SECURITY.md file yet.

Report a vulnerability

HTML context misses entity-encoded colon in `javascript:` / `vbscript:` URIs (`javascript:`, `:`, `&colon;`) and reports them as safe
GHSA-cm2j-353h-9hw7 published Nov 3, 2026 by amitguptagwl

Moderate

Learn more about advisories related to NaturalIntelligence/is-unsafe in the GitHub Advisory Database