ember@1.0.0 vulnerabilities
A framework for creating ambitious web applications.
-
latest version
1.1.1
-
latest non vulnerable version
-
first published
12 years ago
-
latest version published
10 months ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the ember package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Potential XSS Exploit With User-Supplied Data When Using {{group}} Helper In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, a vulnerability has been identified that could lead to unescaped content being inserted into the innerHTML string without being sanitized. |
>=1.4.0-beta.1 <1.4.0-beta.2
>=1.3.0 <1.3.1
>=1.2.0 <1.2.1
>=1.1.0 <1.1.3
>=1.0.0 <1.0.1
|
Potential XSS Exploit With User-Supplied Data When Using {{group}} Helper In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, a vulnerability has been identified that could lead to unescaped content being inserted into the innerHTML string without being sanitized. |
>=1.4.0-beta.1 <1.4.0-beta.2
>=1.3.0 <1.3.1
>=1.2.0 <1.2.1
>=1.1.0 <1.1.3
>=1.0.0 <1.0.1
|