Datatables Datatables.net
2 CVEs affecting Datatables Datatables.net. Latest disclosed: 2021-09-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28458 | High | 7.3 | 2020-12-16 | All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806. |
CVE-2021-23445 | Low | 3.1 | 2021-09-27 | This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped. |