High CVE-2016-1000241 GHSA-cjj8-wfrx-jqcf

Cross-Site Scripting (XSS) in pivottable

Published Sep 1, 2020 · Updated Nov 8, 2023 · Assigned by GHSA

Description

Affected versions of `pivottable` are vulnerable to cross-site scripting, due to a new mechanism used to render JSON elements.

## Recommendation

Update to version 2.0.0 or later.

Ecosystem	Package	Affected	Fixed	Record
npm	pivottable	>= 1.4.0, < 2.0.0	2.0.0	GHSA-cjj8-wfrx-jqcf