Security Advisory

CVE-2021-23443

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-21 16:50:10

Last updated 2024-09-16 22:09:33

Assigner snyk

State PUBLISHED

Description

This affects the package edge.js before 5.3.2. A type confusion vulnerability can be used to bypass input sanitization when the input to be rendered is an array (instead of a string or a SafeValue), even if {{ }} are used.

← Browse all CVEs View on cve.org ↗