Skip to content
OpenAdvisories

Package · npm

dojo

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2021-23450 EPSS 30%

    Prototype Pollution

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    dojo dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm
  • Medium 5.4
    CVE-2015-5654

    Cross-Site Scripting in dojo

    Cross-site scripting (XSS) vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    dojo npm
  • Medium —
    CVE-2010-2273 Public exploit

    Cross-Site Scripting in dojo

    Multiple cross-site scripting (XSS) vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly …

    dojo dojo Debian npm
  • Medium —
    CVE-2008-6681

    Cross-Site Scripting in dojo

    Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary web script or HTML via XML entities in a TEXTAREA element.

    dojo npm