Skip to content
OpenAdvisories
Medium · 6.1 CVE-2015-1866 EUVD-2018-0414GHSA-mp78-r56v-45qc

ember-source vulnerable to Cross-site Scripting

Published Sep 20, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Package: ember-source Ecosystem: RubyGems

Description

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems ember-source >= 1.10.0, < 1.10.1 1.10.1 GHSA-mp78-r56v-45qc
RubyGems ember-source >= 1.11.0, < 1.11.2 1.11.2 GHSA-mp78-r56v-45qc

References