Linuxfoundation Dojox
2 CVEs affecting Linuxfoundation Dojox. Latest disclosed: 2020-03-10. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5259 | High | 7.7 | 2020-03-10 | In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject propert… |
CVE-2019-10785 | Medium | 6.1 | 2020-02-13 | dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xm… |