tocsin

CVE-2019-10785

1 advisory.

npm/dojox CVE-2019-10785: medium 6.1, EPSS 1.85%

XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

Action: Upgrade dojox to 1.11.9 or later.

npm i dojox@1.11.9
npm i dojox@1.12.7
npm i dojox@1.13.6
npm i dojox@1.14.5
npm i dojox@1.15.2
npm i dojox@1.16.1

Affected

introducedfixedlast affected
01.11.9-
1.12.01.12.7-
1.13.01.13.6-
1.14.01.14.5-
1.15.01.15.2-
1.16.01.16.1-

Fixed versions

1.11.91.12.71.13.61.14.51.15.21.16.1

Sources

CVE-2019-10785 · published · modified · JSON