materialize-css (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package materialize-css, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2019-11002 — CVSS 6.1 (medium): In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
• CVE-2019-11003 — CVSS 6.1 (medium): In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
• CVE-2019-11004 — CVSS 6.1 (medium): In Materialize through 1.0.0, XSS is possible via the Toast feature.
• CVE-2022-25349 — CVSS 5.4 (medium): All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as…