WS-2019-0249

In google-closure-library, versions before 20190301.0.0 are vulnerable to Cross-Site-Scripting. The safedomtreeprocessor.processToString function improperly processes empty elements...

@dorfjungs/google-closure-extlib (>=1.0.0, <=1.1.17), @microduino/accountcenter (>=1.8.1, <=1.8.7) +31 more potentially affected by unknown CVE via google-closure-library (>=20151015.0.0, <=20190121.0.0)

google-closure-library NPM version =20151015.0.0, =1.0.0, =1.8.1, =0.1.0, =0.5.0, =2.0.0, =900.1.12, =1.0.0, =0.0.0, =1.0.1, =0.9.0, =0.9.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0249...

EUVD-2021-1203

Malware in sbrugna...

Auth Bypass in Google's Closure-Library

...

CVE-2020-8910

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...

lambdaisland/uri `authority-regex` returns the wrong authority

Summary authority-regex allows an attacker to send malicious URLs to be parsed by the lambdaisland/uri and return the wrong authority. This issue is similar to CVE-2020-8910. Details https://github.com/lambdaisland/uri/blob/d3355fcd3e235238f4dcd37be97787a84e580072/src/lambdaisland/uri.cljcL9 This...

GHSA-CP4W-6X4W-V2H5 lambdaisland/uri `authority-regex` returns the wrong authority

Summary authority-regex allows an attacker to send malicious URLs to be parsed by the lambdaisland/uri and return the wrong authority. This issue is similar to CVE-2020-8910. Details https://github.com/lambdaisland/uri/blob/d3355fcd3e235238f4dcd37be97787a84e580072/src/lambdaisland/uri.cljcL9 This...

GHSA-VH5W-FG69-RC8M Improper Input Validation in Google Closure Library

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation -- update your library to version v20200315...

csp-with-ts (>=0.6.5, <=0.6.51) potentially affected by CVE-2020-8910 via google-closure-library (20200224.0.0)

google-closure-library NPM version 20200224.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on google-closure-library and may be impacted: - csp-with-ts =0.6.5, =0.6.51 Source cves: CVE-2020-8910 Source advisory: GHSA-VH5W-FG69-RC8M...

Improper Input Validation in Google Closure Library

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation -- update your library to version v20200315...

Cross-Site Scripting in google-closure-library

Versions of google-closure-library prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The safedomtreeprocessor.processToString function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. Recommendation...

GHSA-R9Q4-W3FM-WRM2 Cross-Site Scripting in google-closure-library

Versions of google-closure-library prior to 20190301.0.0 are vulnerable to Cross-Site Scripting. The safedomtreeprocessor.processToString function improperly processed empty elements, which could allow attackers to execute arbitrary JavaScript through Mutation Cross-Site Scripting. Recommendation...

PT-2020-21486

Name of the Vulnerable Software and Affected Versions google-closure-library versions prior to 20190301.0.0 Description The issue concerns improper processing of empty elements by the safedomtreeprocessor.processToString function, which could allow attackers to execute arbitrary JavaScript throug...

Insecure URL Parsing

google-closure-library does not properly parse URLs. An attacker is able to send a malicious URL to cause the server to return the wrong authority...

Google Closure Library Input Validation Error Vulnerability

Google Closure Library is the United States Google Google a cross-browser , modular JavaScript library . A security vulnerability exists in the goog.uri file in Google Closure Library v20200224 and earlier versions. An attacker can exploit this vulnerability by sending malicious URLs to obtain...

CVE-2020-8910

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...

CVE-2020-8910

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...

CVE-2020-8910

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...

CVE-2020-8910

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...

Design/Logic Flaw

A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authority. Mitigation: update your library to version v20200315...