Skip to main content
cve.nowby Sazabi
← npm
npmPackage

dijit

2 known vulnerabilities (1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 low
Registry
npm

Advisories 2

  • XSS in Dijit Editor's LinkDialog plugin

    Affected: fixed in 1.11.11; from 1.12.0, fixed in 1.12.9; from 1.13.0, fixed in 1.13.8; from 1.14.0, fixed in 1.14.7; from 1.15.0, fixed in 1.15.4; from 1.16.0, fixed in 1.16.3.

  • dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

    Affected: fixed in 1.13.1.