Find real vulnerabilities before they ship
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Base Score
6.1| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| datatables.net(npm) | 0 | 1.11.3 | N/A |
| Base Score | 6.1 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |
