This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-23445 →
DEBIAN-CVE-2021-23445
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escap...
Original description
The description as published by the source.
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
datatables.js
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.21+dfsg-3"}]}]
Debian:13
datatables.js
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.21+dfsg-3"}]}]
Debian:14
datatables.js
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.21+dfsg-3"}]}]
References
- advisory security-tracker.debian.org