Skip to content
OpenAdvisories

Package · Ubuntu

dojo

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.5
    CVE-2021-23450 EPSS 30%

    Prototype Pollution

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    dojo dojo dojo Debian Ubuntu npm
  • Low 3.7
    CVE-2020-4051

    XSS in Dijit Editor's LinkDialog plugin

    In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1…

    dojo dijit dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5258

    Prototype pollution in dojo

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulat…

    dojo dojo dojo dojo Debian Ubuntu npm
  • High 7.7
    CVE-2020-5259

    Prototype Pollution in Dojox

    In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates…

    dojo dojox dojo dojo Debian Ubuntu npm
  • Medium 6.1
    CVE-2019-10785

    XSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncode

    dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

    dojo dojo dojox Debian Ubuntu npm
  • Medium 6.1
    CVE-2018-1000665

    Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness

    Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in V…

    dojo dojo org.dojotoolkit:dojo Debian Ubuntu Maven
  • Critical 9.8
    CVE-2018-15494

    dojox vulnerable to unescaped string injection

    In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

    dojo dojo dojox Debian Ubuntu npm
  • Medium 6.1
    CVE-2018-6561

    dijit editor cross-site scripting vulnerability

    dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.

    dojo dojo dijit Debian Ubuntu npm