Search for packages
| purl | pkg:npm/datatables.net@1.10.18 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qxnr-wjq5-e7aj
Aliases: CVE-2021-23445 GHSA-h73q-5wmj-q8pj |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') This affects the package datatables.net If an array is passed to the HTML escape entities function it would not have its contents escaped. |
Affected by 0 other vulnerabilities. |
|
VCID-v1ua-7a48-a7b1
Aliases: CVE-2020-28458 GHSA-m7j4-fhg6-xf5v |
datatables.net vulnerable to Prototype Pollution due to incomplete fix All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||