h5p-nodejs-library vulnerabilities

CVEs whose affected-version data names the h5p-nodejs-library package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-7062Medium· 5.2

1w ago

A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4

A stored cross-site scripting (XSS) vulnerability has been identified in the H5P module `h5p-nodejs-library` by Lumi Education UG in versions up to and including 10.0.4. The library allows users to upload H5P content that contains malici…

▾ SunlitLumi Education UG · h5p-nodejs-libraryEPSS 0.25%via NVD