Threats affecting pkg:github/wincr4ck/bharatmlstack

BharatMLStack versions up to and including 1.3.0 contain a Cross Site Scripting (XSS) vulnerability in the Trufflebox UI component, specifically in GenericNumerixTable.jsx. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of the affected application. The vulnerability has a medium severity with a CVSS score of 6.1. No official patch or remediation guidance is provided in the available data.