CVE-2021-23445: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

September 27, 2021 (updated August 15, 2023)

This affects the package datatables.net If an array is passed to the HTML escape entities function it would not have its contents escaped.

References

cdn.datatables.net/1.11.3/
nvd.nist.gov/vuln/detail/CVE-2021-23445

Detect and mitigate CVE-2021-23445 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →