Security Context: the context to find the next vulnerability

saadeghi/daisyui

master@ ae07395

Fixes1

CVEs0

Peak severityMedium

Commits3,174

Regression coverage100.0%

Highlights

Reflected XSS: 1 prior fix. Scrutinize any change in this area.

functions/generateIndex.js: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Reflected XSS: The only historically fixed vulnerability, arising from raw string concatenation when processing CSS themes, allowing selector or value injection into generated styles.

Last analyzed 31 Aug 2026, 20:14 UTC