@altenull/foret-ng (1.0.0-0), @apipass/buttons (>=0.1.1-beta.2, <=0.1.1) +365 more potentially affected by CVE-2021-4231 via @angular/core (>=10.0.0, <=10.2.4)

@angular/core NPM version =10.0.0, =0.1.1-beta.2, =0.1.1-beta.4, =0.1.1-beta.14, =0.1.1-beta.12, =0.1.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - @clemanto/ng2-smart-table 1.7.3 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +16 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =0.0.2, =0.0.3 - gs-angular-library 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: OSV:GHSA-C75V-2VQ8-878F...

@altenull/foret-ng (1.0.0-0), @apipass/buttons (>=0.1.1-beta.2, <=0.1.1) +365 more potentially affected by CVE-2021-4231 via @angular/core (>=10.0.0, <=10.2.4)

@angular/core NPM version =10.0.0, =0.1.1-beta.2, =0.1.1-beta.4, =0.1.1-beta.14, =0.1.1-beta.12, =0.1.1, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2 - @clemanto/ng2-smart-table 1.7.3 and more Source cves: CVE-2021-4231 Source advisory: GHSA-C75V-2VQ8-878F...

Angular vulnerable to Cross-site Scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@hyperledger/cactus-cockpit (0.3.0), @kengic/ng.account (>=3.2.100, <=3.3.127) +16 more potentially affected by CVE-2021-4231 via @angular/core (>=11.0.0, <=11.0.4)

@angular/core NPM version =11.0.0, =3.2.100, =3.2.106, =3.2.100, =1.0.100, =1.0.1-BETA.93934, =1.0.0-BETA.93934, =1.0.59, =1.1.61, =1.0.2, =0.0.2, =0.0.3 - gs-angular-library 0.0.0 and more Source cves: CVE-2021-4231 Source advisory: GHSA-C75V-2VQ8-878F...

GHSA-C75V-2VQ8-878F Angular vulnerable to Cross-site Scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

Cross site scripting in Angular

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

Cross site scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@amicus/auth (>=1.0.3, <=1.1.5), @amicus/broadcasting (>=1.0.3, <=1.1.5) +446 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=4.0.0, <=4.4.6)

@angular/platform-browser-dynamic NPM version =4.0.0, =1.0.3, =1.0.3, =1.0.3, =1.1.1, =2.8.2, =3.0.0-beta.45, =1.32.0-SNAPSHOT.20171018190510, =1.0.0, =0.0.64, =1.10.0, =2.0.0-rc.2, =1.10.1, =2.0.0-beta.8, =1.0.1, =0.2.1, =0.3.4 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4...

@c8y/apps (>=9.16.1-rc.0, <=9.24.2-rc.0), @mediafly/js-ui (>=26.3.13, <=28.4.3) +3 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=6.0.3, <=6.1.9)

@angular/upgrade NPM version =6.0.3, =9.16.1-rc.0, =26.3.13, =2.0.0, =0.3.19, =0.5.6 - path-framework-urechmat 0.5.4 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@2aminternal/ngx-table-view (>=1.0.1, <=1.0.6), @acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0) +217 more potentially affected by CVE-2021-4231 via @angular/common (>=6.0.0, <=6.1.9)

@angular/common NPM version =6.0.0, =1.0.1, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =0.6.5 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +240 more potentially affected by CVE-2021-4231 via @angular/animations (>=9.0.0, <=9.1.12)

@angular/animations NPM version =9.0.0, =1.0.0, =3.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =9.0.0, =9.0.5 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

angular-io-bretwang (1.0.0), angular-io-bretwang02 (1.0.0) +13 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=5.0.5, <=5.2.9)

@angular/upgrade NPM version =5.0.5, =1.0.0, =1.0.0, =1.0.0, =1.0.6, =1.0.48, =5.0.6, =1.0.0, =1.0.3 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +475 more potentially affected by CVE-2021-4231 via @angular/common (>=8.0.0, <=8.2.13)

@angular/common NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =7.0.0-internal-20190531-1650, =1.0.6, =1.0.30 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@c8y/apps (>=9.25.1, <=1005.8.0), cmf.angular (2.0.0-71817) +2 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=7.0.0, <=7.2.13)

@angular/upgrade NPM version =7.0.0, =9.25.1, =0.5.5, =2.0.0-beta.1, =2.0.0-beta.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@topibd/core (>=0.2.4, <=0.2.5), fusing-angular (>=0.0.0, <=0.0.17) +5 more potentially affected by CVE-2021-4231 via @angular/service-worker (>=6.0.0, <=6.1.9)

@angular/service-worker NPM version =6.0.0, =0.2.4, =0.0.0, =0.0.0, =2.6.2, =2.8.0 - kahla 2.2.0 - topibd-core 0.2.3 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@esfaenza/ngx-currency-mask (>=9.0.0, <=9.0.5), @esfaenza/ngx-introjs (9.0.5) +23 more potentially affected by CVE-2021-4231 via @angular/service-worker (>=9.0.0, <=9.1.9)

@angular/service-worker NPM version =9.0.0, =9.0.0, =7.15.0-snapshot-1585667137763.0, =0.1.0, =0.1.3, =0.0.1, =0.0.1, =0.0.1, =5.0.11, =0.0.4, =0.0.0, =0.0.13, =2.0.83, =2.0.118 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @bi8/am-data-table (>=6.0.1, <=6.0.2) +179 more potentially affected by CVE-2021-4231 via @angular/animations (>=6.0.0, <=6.1.9)

@angular/animations NPM version =6.0.0, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =1.0.0, =0.0.5, =2.0.0, =2.0.1 - @hackages/ngxerrors 6.0.0 - @hapiness/custom-elements-loader 6.4.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...