~ / search / GHSA-84cm-x2q5-8225

GHSA-84cm-x2q5-8225

dojox vulnerable to unescaped string injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-15494

Packages

EcosystemPackageAffectedFixed in
npm dojox < 1.14.0 1.14.0

Details

As written in the advisory (Markdown source, shown as plain text).

In Dojo Toolkit before 1.14.0, there is unescaped string injection in dojox/Grid/DataGrid.

References

External links from the advisory. They lead to third-party sites.