There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without va…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.02053·Published 2020-01-02·Fixed in 3.5.0-beta, 3.5.0CWE-79