org.webjars.bower:dojox@1.11.2 vulnerabilities

1.13.0-1

8 years ago

6 years ago

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.bower:dojox package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Prototype Pollution org.webjars.bower:dojox is a meta-package of other packages that was historically a development area for the Dojo Toolkit. Affected versions of this package are vulnerable to Prototype Pollution. The Dojox jQuery wrapper `jqMix` `mixin` method is vulnerable to Prototype Pollution. How to fix Prototype Pollution? There is no fixed version for `org.webjars.bower:dojox`.	[0,)
H Cross-site Scripting (XSS) org.webjars.bower:dojox is a meta-package of other packages that was historically a development area for the Dojo Toolkit. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). `dojox.xmpp.util.xmlEncode` only encodes the first occurrence of each character, not all of them. How to fix Cross-site Scripting (XSS)? There is no fixed version for `org.webjars.bower:dojox`.	[0,)
M Arbitrary String Injection org.webjars.bower:dojox is a meta-package of other packages that was historically a development area for the Dojo Toolkit. Affected versions of this package are vulnerable to Arbitrary String Injection. How to fix Arbitrary String Injection? There is no fixed version for `org.webjars.bower:dojox`.	[0,)