Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
3 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
The Typebot viewer (packages/embeds/js) renders anchor tags from rich text bubble content without filtering the javascript: URI scheme. A bot author can set a link URL to javascript:PAYLOAD, which executes in the visitor's browser context when clicked. Since the viewer is typically embedded in a third-party site, the attacker's JavaScript runs in the host page's origin and can exfiltrate cookies and session tokens. Details Vulnerable file: packages/embeds/js/src/features/blocks/bubbles/textBubble/components/plate/PlateBlock.tsx SolidJS does not sanitize href attribute values — javascript: URIs pass through to the DOM unchanged. The same issue exists in ImageBubble.tsx line 102 for image link wrapping. Steps to Reproduce Source-verified: PlateBlock.tsx:32 renders <a href={url} with no scheme filtering. Puppeteer alert confirmed document.domain execution when link clicked. Impact - Any authenticated Typebot user (including free tier) can create a bot with this payload - When…
Recommended action: Upgrade to 0.10.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
The rating block's custom icon feature accepts arbitrary HTML/SVG via the customIcon.svg field and renders it using Solid's innerHTML directive without any sanitization. When a malicious typebot is imported or crafted by a workspace collaborator, the payload executes in the builder's DOM context (builder.typebot.io), bypassing the isUnsafe Web Worker sandbox that protects Script blocks during preview. This allows session hijacking and privilege escalation within the builder application. Severity High (CVSS 3.1: 8.7) CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N - Attack Vector: Network — malicious typebot can be delivered via import/template sharing or crafted by a collaborator - Attack Complexity: Low — payload is a trivial HTML injection, no special conditions required - Privileges Required: Low — attacker needs either collaborator access to a workspace or the ability to distribute a typebot template - User Interaction: Required — victim must preview the bot in the builder -…
Recommended action: Upgrade to 0.10.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, Google Sheets tokens, and SMTP passwords. The /api/trpc/credentials.getCredentials endpoint returns plaintext API keys without verifying credential ownership --- Details The Script block with "Execute on client" enabled runs arbitrary JavaScript in the victim's browser with their authenticated session. This allows API calls on their behalf. The /api/trpc/credentials.getCredentials endpoint returns plaintext credentials: The endpoint only checks if you're authenticated, not if you own the credential. Anyone can steal credentials by calling this with different IDs. Vulnerable file: packages/embeds/js/src/features/blocks/logic/script/executeScript.ts --- PoC Here's how to reproduce: 1. Create a new typebot in the Builder 2. Add a Script block and enable…
Recommended action: Upgrade to 0.9.15 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.