skills/syncfusion/javascript-ui-controls-skills/syncfusion-javascript-buttons/Socket

syncfusion-javascript-buttons

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

Anomalyreferences/dropdownbutton-item-template.md

LOW

AnomalyLOW

references/dropdownbutton-item-template.md

No evidence of intentional malware or supply-chain sabotage is present. The code is ordinary UI example code, but its raw HTML interpolation creates a conditional XSS and unsafe-navigation risk when item properties are untrusted. Risk is low for the shown static data and higher when values come from external or user-controlled sources.

Confidence: 98%Severity: 52%

Audit Metadata

Analyzed At

Sep 17, 2026, 10:58 PM

Package URL

pkg:socket/skills-sh/syncfusion%2Fjavascript-ui-controls-skills%2Fsyncfusion-javascript-buttons%2F@b700558227250f6498c676fafe974ea7463f3c0f2e4b81858ab05a6c7562f44a