Skip to content
OpenAdvisories
High DLA-3289-1 2 CVEs

dojo - security update

Published Jan 28, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 dojo 1.14.2+dfsg1-1+deb10u3

Vulnerabilities 2

  • High 7.5
    CVE-2021-23450 EPSS 30%

    Prototype Pollution

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    dojo dojo dojo Debian Ubuntu npm
  • Low 3.7
    CVE-2020-4051

    XSS in Dijit Editor's LinkDialog plugin

    In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1…

    dojo dijit dojo dojo Debian Ubuntu npm