Datatables.net package updates #12682
Merged
DryRunSecurity / General Security Analyzer
succeeded
Jun 25, 2025 in 38s
DryRun Security
Details
General Security Analyzer Findings: 1 detected
⚠️ Dependency Security Risk components/package.json (click for details)
| Type | Dependency Security Risk |
| Description | The patch introduces DataTables dependencies with known historical vulnerabilities. Specifically, CVE-2020-28458 indicates a prototype pollution vulnerability, and CVE-2021-36713 reveals a potential Cross-Site Scripting (XSS) risk. While the specific versions added might have addressed these issues, the introduction of these libraries increases the application's potential attack surface. |
| Filename | components/package.json |
| CodeLink | django-DefectDojo/components/package.json Lines 12 to 20 in cacac95 |
Loading