Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-r9q4-w3fm-wrm2

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r9q4-w3fm-wrm2

Cross-Site Scripting in google-closure-library Versions of `google-closure-library` prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The `safedomtreeprocessor.processToString()` function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. ## Recommendation Upgrade to version 20190301.0.0 or later.

gitlab/npm/google-closure-library/GMS-2020-726

Cross-Site Scripting in google-closure-library Versions of `google-closure-library` prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The `safedomtreeprocessor.processToString()` function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. ## Recommendation Upgrade to version 20190301.0.0 or later.