PT-2020-20363 · Google · Google Closure Library

Name of the Vulnerable Software and Affected Versions: Google Closure Library versions up to and including v20200224 Description: A URL parsing issue in goog.uri of the Google Closure Library allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority...

Cross-Site Scripting

Overview Versions of google-closure-library prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The safedomtreeprocessor.processToString function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting...