[Security] XSS vulnerability in scrumHelper.js: escapeHtml() exists but is never applied to API-sourced data in report rendering
April 14, 2026 · #546
JavaScript
Difficulty: Medium
Labels
bug
Parent Repository
fossasia/scrum_helper
JavaScript repository
1,286 188