CVE-2021-23445
Published Sep 27, 2021This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Vendor/product archive
2 CVEs tagged to datatables / datatables.net — 0 Critical, 1 High, 0 Medium, 1 Low, 0 Unrated.
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.