org.dojotoolkit:dojo@1.3.0b2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.dojotoolkit:dojo package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M URL Redirection to Untrusted Site ('Open Redirect') org.dojotoolkit:dojo is a foundation package for the Dojo 1 Toolkit. While still being maintained, new development is primarily focused on modern Dojo. Affected versions of this package are vulnerable to URL Redirection to Untrusted Site ('Open Redirect') due to improper validation of user-supplied input in multiple components. An attacker can redirect users to arbitrary web sites and conduct phishing attacks by manipulating unspecified vectors, possibly related to `iframe_history.html`, `FLAudio.js`, `FLVideo.js`, `audio.swf`, `video.swf`, `build.js`, `buildUtil.js`, and `runner.html`. How to fix URL Redirection to Untrusted Site ('Open Redirect')? Upgrade `org.dojotoolkit:dojo` to version 1.3.3 or higher.	[,1.3.3)
M Cross-site Scripting (XSS) no desc	[,1.14.0)
M Cross-site Scripting (XSS) no desc	[,1.10.10) [1.11.0,1.11.6) [1.12.0,1.12.4) [1.13.0,1.13.1)