@altenull/foret-ng (1.0.0-0), @apipass/buttons (>=0.1.1-beta.2, <=0.1.1) +365 more potentially affected by CVE-2021-4231 via @angular/core (>=10.0.0, <=10.2.4)

@angular/core NPM version =10.0.0, =0.1.1-beta.2, =0.1.1-beta.4, =0.1.1-beta.14, =0.1.1-beta.12, =0.1.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - @clemanto/ng2-smart-table 1.7.3 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +16 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =0.0.2, =0.0.3 - gs-angular-library 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +16 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =0.0.2, =0.0.3 - gs-angular-library 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: GHSA-C75V-2VQ8-878F...

Angular vulnerable to Cross-site Scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

GHSA-C75V-2VQ8-878F Angular vulnerable to Cross-site Scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@altenull/foret-ng (1.0.0-0), @apipass/buttons (>=0.1.1-beta.2, <=0.1.1) +365 more potentially affected by CVE-2021-4231 via @angular/core (>=10.0.0, <=10.2.4)

@angular/core NPM version =10.0.0, =0.1.1-beta.2, =0.1.1-beta.4, =0.1.1-beta.14, =0.1.1-beta.12, =0.1.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - @clemanto/ng2-smart-table 1.7.3 and more Source cves: CVE-2021-4231 Source advisory: GHSA-C75V-2VQ8-878F...

Cross site scripting in Angular

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

Cross site scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

CVE-2021-4231

The CVE-2021-4231 entry corresponds to an Angular XSS vulnerability in the Angular versions up to 11.0.4 and 11.1.0-next.2, specifically affecting the handling of comments, where input could be crafted to execute script in a victim’s browser when rendering. The upstream patch fixes this by upgrad...

@beenotung/tslib (>=1.0.0, <=3.4.1), @blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1) +199 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=4.0.0, <=4.4.6)

@angular/compiler-cli NPM version =4.0.0, =1.0.0, =1.10.0, =1.10.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =0.0.1, =0.1.0, =2.4.6-scm.5, =2.4.9 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@totalapi/metrix-core (>=0.0.2, <=1.0.2) potentially affected by CVE-2021-4231 via @angular/platform-webworker (4.1.0)

@angular/platform-webworker NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-webworker and may be impacted: - @totalapi/metrix-core =0.0.2, =1.0.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@2aminternal/ngx-table-view (>=1.0.1, <=1.0.6), @acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0) +217 more potentially affected by CVE-2021-4231 via @angular/common (>=6.0.0, <=6.1.9)

@angular/common NPM version =6.0.0, =1.0.1, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =0.6.5 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +271 more potentially affected by CVE-2021-4231 via @angular/common (>=9.0.0, <=9.1.12)

@angular/common NPM version =9.0.0, =1.0.0, =3.0.0, =10.0.7, =1.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.2 - @datorama/akita-ng-entity-service 2.0.2 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +16 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =0.0.2, =0.0.3 - gs-angular-library 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +536 more potentially affected by CVE-2021-4231 via @angular/common (>=4.0.0, <=4.4.6)

@angular/common NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =2.8.2, =3.0.0-beta.45, =1.32.0-SNAPSHOT.20171018190510, =1.0.0, =0.0.64, =1.10.0, =2.0.0-rc.2, =1.10.1, =2.0.0-beta.8, =1.0.1, =0.2.1, =0.3.4 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@acaisoft/angular-azure-maps (>=0.0.3, <=0.0.11), @afelio/sprb-osiris-uikit (1.0.48) +380 more potentially affected by CVE-2021-4231 via @angular/common (>=5.0.0, <=5.2.10)

@angular/common NPM version =5.0.0, =0.0.3, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =0.0.2, =1.0.0-beta.1, =0.1.15, =1.0.0, =1.0.0-alpha.55,...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +475 more potentially affected by CVE-2021-4231 via @angular/common (>=8.0.0, <=8.2.13)

@angular/common NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =7.0.0-internal-20190531-1650, =1.0.6, =1.0.30 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +469 more potentially affected by CVE-2021-4231 via @angular/forms (>=8.0.0, <=8.2.13)

@angular/forms NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =1.0.6, =0.2.5, =0.6.8 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +285 more potentially affected by CVE-2021-4231 via @angular/forms (>=9.0.0, <=9.1.12)

@angular/forms NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...