Skip to content
Sign in
3.1 Low

CVE-2021-23445 This affects the package datatables.net before 1.11.3

Description

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

Affected products and versions

Product Affected versions Fixed in
datatables.net 1.11 earliest → < 1.11.3 1.11.3

Other CVEs of datatables.net

The 2 CVEs of datatables.net →
CVE-2020-28458 All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for… 7.3 High
Track this CVE