GitHub Advisoryadvisory · npm

GHSA-cjj8-wfrx-jqcf Cross-Site Scripting (XSS) in pivottable

HIGH Published 2020-09-01 Modified 2021-09-23 Official page ↗
Aliases
CVE-2016-1000241
Ecosystem
npm
Packages
pivottable
Severity
High
Weaknesses
CWE-79
Reviewed
2020-08-31

Affected packages

• npm pivottable: >= 1.4.0, < 2.0.0 → fixed in 2.0.0

Description

Affected versions of `pivottable` are vulnerable to cross-site scripting, due to a new mechanism used to render JSON elements. Recommendation Update to version 2.0.0 or later.

Related

Alias · not in database (1)

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References