~ / search / GHSA-h73q-5wmj-q8pj

GHSA-h73q-5wmj-q8pj

Cross site scripting in datatables.net

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23445

Packages

EcosystemPackageAffectedFixed in
npm datatables.net < 1.11.3 1.11.3

Details

As written in the advisory (Markdown source, shown as plain text).

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

References

External links from the advisory. They lead to third-party sites.