Lucene search

K
nodejsAnonymousNODEJS:1777
HistoryAug 10, 2021 - 4:10 p.m.

Cross-Site Scripting (XSS)

2021-08-1016:10:32
Anonymous
www.npmjs.com
47

Overview

In affected versions of video.js, the src attribute of track tag allows to bypass HTML escaping and execute arbitrary code.

Recommendation

Upgrade to version 7.14.3 or later

References

CPENameOperatorVersion
video.jslt7.14.3