dijit (>=1.16.0 <=1.16.1), dojox (>=1.16.0 <=1.16.1) potentially affected by CVE-2020-5258 via dojo (>=1.16.0 <=1.16.1)

dojo NPM version =1.16.0, =1.16.0, =1.16.0, =1.16.1 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@agrc/helpers (>=1.0.0 <=1.0.1), @dojo/interop (>=4.0.0 <=7.0.0) +3 more potentially affected by CVE-2020-5258 via dojo (>=1.13.0 <=1.13.6)

dojo NPM version =1.13.0, =1.0.0, =4.0.0, =0.1.10, =1.13.0, =1.13.0, =1.13.10 Source cves: CVE-2020-5258 Source advisory: SNYK:JS-DOJO-559224...

@hpcc-js/dgrid-shim (>=0.0.29 <=0.0.32), dijit (>=1.12.1 <=1.12.11) +1 more potentially affected by CVE-2010-2273 via dojo (>=1.12.1 <=1.12.3)

dojo NPM version =1.12.1, =0.0.29, =1.12.1, =1.12.1, =1.12.11 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

@agrc/helpers (>=1.0.0 <=1.0.1), @dojo/interop (>=4.0.0 <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (=1.13.0)

dojo NPM version =1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0, =0.1.10, =0.1.12 - dijit =1.13.0 - dojox =1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

bryaktestgrid (>=0.0.1 <=0.0.6), dijit (>=1.11.0 <=1.11.13) +3 more potentially affected by CVE-2010-2273 via dojo (>=1.11.0 <=1.11.5)

dojo NPM version =1.11.0, =0.0.1, =1.11.0, =0.1.0, =1.11.0, =0.0.1, =0.5.24 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

dijit (>=1.10.0 <=1.10.1) potentially affected by CVE-2010-2273 via dojo (>=1.10.0 <=1.10.1)

dojo NPM version =1.10.0, =1.10.0, =1.10.1 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

Dojo Toolkit Cross-Site Scripting Vulnerability

Dojo Toolkit is the Dojo Foundation an open source DHTML toolkit implemented in the JavaScript language . The toolkit is easy to build interactive user interface , Dojo's extension package can make the user's code easier to maintain , less coupling , etc. dijit.Editor is one of the WYSIWYG editor...

Cross-site Scripting (XSS)

dijit is vulnerable to cross-site scripting XSS attacks. Attackers can execute arbitrary webscript through the onload attributes of SVG elements...

DEBIAN-CVE-2018-6561

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...

UBUNTU-CVE-2018-6561

dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element...

DEBIAN-CVE-2010-2275

Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...