GHSA-r9q4-w3fm-wrm2

GHSA-r9q4-w3fm-wrm2 · Cross-Site Scripting in google-closure-library

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Versions of `google-closure-library` prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The `safedomtreeprocessor.processToString()` function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. ## Recommendation Upgrade to version 20190301.0.0 or later.

Fix available

Published

2020-09-02T21:21:43Z

Updated

2021-09-27T21:01:47Z

Stack: node

Check your server →