6 matches found
CVE-2021-23450
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...
CVE-2021-23450
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...
CVE-2021-23450
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...
CVE-2021-23450
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...
CVE-2021-23450
CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...
[SECURITY] [DLA 1492-1] dojo security update
Package : dojo Version : 1.10.2+dfsg-1+deb8u1 CVE ID : CVE-2018-15494 Debian Bug : 906540 It was discovered that there was a string injection vulnerability in the "dojo" Javascript library. For Debian 8 "Jessie", this issue has been fixed in dojo version 1.10.2+dfsg-1+deb8u1 by Abhijith PA. We...