@acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +204 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=6.0.0, <=6.1.9)

@angular/platform-browser NPM version =6.0.0, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =2.0.0, =2.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

CVE-2021-4231

The CVE-2021-4231 entry corresponds to an Angular XSS vulnerability in the Angular versions up to 11.0.4 and 11.1.0-next.2, specifically affecting the handling of comments, where input could be crafted to execute script in a victim’s browser when rendering. The upstream patch fixes this by upgrad...

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @bi8/am-data-table (>=6.0.1, <=6.0.2) +176 more potentially affected by CVE-2021-4231 via @angular/router (>=6.0.0, <=6.1.9)

@angular/router NPM version =6.0.0, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =2.0.0, =2.0.1 - @golden-codes/core 2.0.0 - @hackages/ngxerrors 6.0.0 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=0.1.9, <=1.0.3), @proactive-as/angular.vendor (>=7.0.0-beta.1, <=7.2.13) +5 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=7.0.4, <=7.2.13)

@angular/platform-server NPM version =7.0.4, =0.1.9, =7.0.0-beta.1, =0.0.71, =0.0.2, =0.1.1, =1.2.1-beta.777, =0.0.1-1.1, =0.0.111 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

CVE-2021-4231 Angular Comment cross site scripting

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

jack-test-app (1.0.0), jsmusicdb-next (>=2.4.0, <=2.6.1) potentially affected by CVE-2021-4231 via @angular/service-worker (>=5.2.1, <=5.2.10)

@angular/service-worker NPM version =5.2.1, =2.4.0, =2.6.1 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +285 more potentially affected by CVE-2021-4231 via @angular/forms (>=9.0.0, <=9.1.12)

@angular/forms NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +469 more potentially affected by CVE-2021-4231 via @angular/forms (>=8.0.0, <=8.2.13)

@angular/forms NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =1.0.6, =0.2.5, =0.6.8 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@totalapi/metrix-core (>=0.0.2, <=1.0.2) potentially affected by CVE-2021-4231 via @angular/platform-webworker (4.1.0)

@angular/platform-webworker NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-webworker and may be impacted: - @totalapi/metrix-core =0.0.2, =1.0.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@abt-desk/apm (>=0.0.1, <=0.33.12), @abt-desk/rsc (>=0.1.3, <=0.1.124) +458 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=7.0.0, <=7.2.14)

@angular/platform-browser-dynamic NPM version =7.0.0, =0.0.1, =0.1.3, =1.0.0, =2.0.0, =9.25.1, =1.0.2-1.beta.1, =0.0.1, =0.0.1, =0.0.1, =0.6.5 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +256 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=9.0.0, <=9.1.12)

@angular/platform-browser-dynamic NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@acaisoft/angular-azure-maps (>=0.0.12, <=1.0.0), @angular-materials/ngx-admin (>=1.0.0, <=1.0.1) +198 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=6.0.0, <=6.1.9)

@angular/platform-browser-dynamic NPM version =6.0.0, =0.0.12, =1.0.0, =6.0.1, =6.0.0, =9.16.1-rc.0, =1.1.0, =5.0.0-beta.1, =0.0.5, =0.0.1, =2.0.0, =2.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +461 more potentially affected by CVE-2021-4231 via @angular/router (>=8.0.0, <=8.2.13)

@angular/router NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =1.0.6, =0.2.5, =0.6.8 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bb-cli/schematics (>=0.0.1-alpha.1, <=3.3.1) +468 more potentially affected by CVE-2021-4231 via @angular/compiler (>=8.0.0, <=8.2.13)

@angular/compiler NPM version =8.0.0, =0.0.1, =0.0.1-alpha.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =7.0.0-internal-20190531-1650, =7.0.0-internal-20190625-2303 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@arsedizioni/ars-utils (>=1.0.0, <=1.0.3), @astick/astick-ng (1.0.0) +270 more potentially affected by CVE-2021-4231 via @angular/platform-browser (>=9.0.0, <=9.1.12)

@angular/platform-browser NPM version =9.0.0, =1.0.0, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.3, =0.0.1, =5.1.4, =1.0.0, =1.0.1 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@beenotung/tslib (>=1.0.0, <=3.4.1), @blackbaud-bobbyearl/skyux-builder (>=1.10.0, <=1.10.1) +199 more potentially affected by CVE-2021-4231 via @angular/compiler-cli (>=4.0.0, <=4.4.6)

@angular/compiler-cli NPM version =4.0.0, =1.0.0, =1.10.0, =1.10.1, =0.2.1, =0.2.1, =0.2.1, =0.2.1, =0.2.0, =0.2.1, =0.2.1, =0.0.1, =0.1.0, =2.4.6-scm.5, =2.4.9 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@acaisoft/angular-azure-maps (>=0.0.3, <=0.0.11), @afelio/sprb-osiris-uikit (1.0.48) +287 more potentially affected by CVE-2021-4231 via @angular/platform-browser-dynamic (>=5.0.0, <=5.2.10)

@angular/platform-browser-dynamic NPM version =5.0.0, =0.0.3, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =0.0.2, =1.0.0-beta.1, =0.1.6, =3.0.0,...

@totalapi/metrix-core (>=0.0.2, <=1.0.2) potentially affected by CVE-2021-4231 via @angular/platform-webworker-dynamic (4.1.0)

@angular/platform-webworker-dynamic NPM version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-webworker-dynamic and may be impacted: - @totalapi/metrix-core =0.0.2, =1.0.2 Source cves: CVE-2021-4231 Source advisory:...

@afelio/sprb-osiris-uikit (1.0.48), @alfresco/adf-content-services (>=2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, <=2.5.0-ffef7688d7d5b9a2827d4427d416d0b5b2f377d4) +202 more potentially affected by CVE-2021-4231 via @angular/animations (>=5.0.0, <=5.2.10)

@angular/animations NPM version =5.0.0, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =2.0.0-032f1237f0e7996aee56611b974f6fa6aa39fa70, =0.0.2, =1.0.0-beta.1, =2.23.1, =0.1.6, =3.0.0, =0.0.54,...