Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:datatables.net:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductDatatables.Net (9ac319d8-64a3-5a07-bb22-58aa903bd4b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23445 vulnerable 2026-06-08 05:30:02.947160 Cross-site Scripting (XSS)
LOW (3.1)
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Published: 2021-09-27T16:35:18.234Z
Updated: 2024-09-16T18:39:20.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28458 vulnerable 2026-06-08 05:23:56.099328 Prototype Pollution
HIGH (7.3)
All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
Published: 2020-12-16T10:35:20.456Z
Updated: 2024-09-16T23:22:14.200Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.