What is GHSA-hgr5-82rc-p936?

GHSA-hgr5-82rc-p936 is a security advisory published by GitHub Security Advisories with High severity. Cross-Site Scripting in md-data-table

Why does GHSA-hgr5-82rc-p936 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-hgr5-82rc-p936?

GHSA-hgr5-82rc-p936 affects 1 product, including: npm/md-data-table:\u003e= 0.0.0.

GHSA-hgr5-82rc-p936HighDisclosed before NVD

Cross-Site Scripting in md-data-table

Vendor

GitHub Security Advisories

Published

September 1, 2020

Last Modified

January 9, 2023

📋 Description

All versions of md-data-table are vulnerable to cross-site scripting (XSS). This vulnerability is exploitable if an attacker has control over data that is rendered by mdt-row

Recommendation

As there is no fix for this vulnerability at this time we recommend either selecting another package to perform this functionality or properly sanitizing all user data prior to rendering with md-data-table

🎯 Affected products1

npm/md-data-table:>= 0.0.0

🔗 References (2)

https://www.npmjs.com/advisories/748
https://github.com/advisories/GHSA-hgr5-82rc-p936