Skip to content
OpenAdvisories

Package · npm

dojox

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.7
    CVE-2020-5259

    Prototype Pollution in Dojox

    In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates…

    dojo dojox dojo dojo Debian Ubuntu npm
  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm
  • Critical 9.8
    CVE-2018-15494

    dojox vulnerable to unescaped string injection

    In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

    dojo dojo dojox Debian Ubuntu npm