TI-2021-17939 CVE-2021-41097 · GHSA-3c9c-2p65-qvwv
Prototype pollution in aurelia-path
Priority MEDIUM 47
aurelia-path is part of the Aurelia platform and contains utilities for path manipulation.
No Bluespire vulnerabilities are listed in CISA KEV.
2 records
aurelia-path is part of the Aurelia platform and contains utilities for path manipulation.
The HTMLSanitizer class in html-sanitizer.ts in all released versions of the Aurelia framework 1.x repository is vulnerable to XSS.