GHSA-r9q4-w3fm-wrm2
GHSA-r9q4-w3fm-wrm2 · Cross-Site Scripting in google-closure-library
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Versions of `google-closure-library` prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The `safedomtreeprocessor.processToString()` function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. ## Recommendation Upgrade to version 20190301.0.0 or later.
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: node
Produits et versions concernés
google-closure-library npm
- Plages de versions concernées
- SEMVER: < 20190301.0.0
Mettez à jour vers 20190301.0.0