@ajthinking/data-story (>=0.0.17 <=0.0.19), @alice-lib/component (>=1.0.3 <=1.0.7) +80 more potentially affected by CVE-2021-41086 via jsuites (>=2.8.0 <=4.17.7)

jsuites NPM version =2.8.0, =0.0.17, =1.0.3, =1.0.1, =4.2.3, =1.0.2, =2.1.2, =1.0.0, =1.0.0, =1.5.0, =1.0.0, =1.0.0, =1.3.3, =1.0.1, =2.1.0 and more Source cves: CVE-2021-41086 Source advisory: OSV:GHSA-QH7X-J4V8-QW5W...

CVE-2021-41086 Clipboard-based XSS in jsuites

jsuites is an open source collection of common required javascript web components. In affected versions users are subject to cross site scripting XSS attacks via clipboard content. jsuites is vulnerable to DOM based XSS if the user can be tricked into copying anything from a malicious and pasting...