Description
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | ember-source | >= 1.8.0, < 1.11.4 | 1.11.4 | GHSA-m3q7-rj8g-m457 |
| RubyGems | ember-source | >= 1.12.0, < 1.12.2 | 1.12.2 | GHSA-m3q7-rj8g-m457 |
| RubyGems | ember-source | >= 1.13.0, < 1.13.12 | 1.13.12 | GHSA-m3q7-rj8g-m457 |
| RubyGems | ember-source | >= 2.0.0, < 2.0.3 | 2.0.3 | GHSA-m3q7-rj8g-m457 |
| RubyGems | ember-source | >= 2.1.0, < 2.1.2 | 2.1.2 | GHSA-m3q7-rj8g-m457 |
| RubyGems | ember-source | >= 2.2.0, < 2.2.1 | 2.2.1 | GHSA-m3q7-rj8g-m457 |