Datatables.net CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2021-23445

Cross-site Scripting (XSS)

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

CVSS 3.1 · 3.1 Low EPSS 2.0% KEV · Not listed

Vendors

Datatables Redhat

Products

Datatables.net Jboss Enterprise Application Platform

CVE-2020-28458

Prototype Pollution

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.

CVSS 3.1 · 7.3 High EPSS 3.7% KEV · Not listed

Vendors

Datatables Redhat

Products

Datatables.net Rhev Hypervisor Rhev Manager

Page 1 of 1.