Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncjUtODJyYy1wOTM2

Cross-Site Scripting in md-data-table

All versions of md-data-table are vulnerable to cross-site scripting (XSS). This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row

Recommendation

As there is no fix for this vulnerability at this time we recommend either selecting another package to perform this functionality or properly sanitizing all user data prior to rendering with md-data-table

Permalink: https://github.com/advisories/GHSA-hgr5-82rc-p936
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncjUtODJyYy1wOTM2
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 4 years ago
Updated: about 2 years ago

Identifiers: GHSA-hgr5-82rc-p936
References:

• https://www.npmjs.com/advisories/748
• https://github.com/advisories/GHSA-hgr5-82rc-p936

Blast Radius: 0.0

Affected Packages