Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

To report a suspected vulnerability, please either:

Privately report a vulnerability through GitHub at https://github.com/CloudCannon/pagefind/security
Email support@cloudcannon.com.

Please do not report any suspected vulnerabilities through public issues.

Supported versions

Only the latest major version of Pagefind will be supported with security updates.

DOM clobbering could escalate to XSS
GHSA-gprj-6m2f-j9hx published Sep 3, 2024 by bglw

Moderate

Learn more about advisories related to CloudCannon/pagefind in the GitHub Advisory Database