GHSA-r9q4-w3fm-wrm2
GHSA-r9q4-w3fm-wrm2 · Cross-Site Scripting in google-closure-library
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Versions of `google-closure-library` prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The `safedomtreeprocessor.processToString()` function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. ## Recommendation Upgrade to version 20190301.0.0 or later.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: node
Productos y versiones afectados
google-closure-library npm
- Intervalos de versiones afectados
- SEMVER: < 20190301.0.0
Actualiza a 20190301.0.0