Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2021-23414

Cross-site Scripting (XSS)

This affects the package video.js before 7.14.3. The src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.

CVSS 3.1 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Fedoraproject Videojs
Products
Fedora Video.js