← All advisories

Critical severity9.8NVD Advisory· Published Aug 18, 2018· Updated Jun 17, 2026

CVE-2018-15494

CVE-2018-15494

Description

In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
dojoxnpm	< 1.14.0	1.14.0

Affected products

1

ghsa-coords
pkg:npm/dojox
Range: < 1.14.0

Patches

Vulnerability mechanics

References

5

dojotoolkit.org/blog/dojo-1-14-releasednvdVendor AdvisoryWEB
github.com/advisories/GHSA-84cm-x2q5-8225ghsaADVISORY
github.com/dojo/dojox/pull/283nvdThird Party AdvisoryWEB
lists.debian.org/debian-lts-announce/2018/09/msg00002.htmlnvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-15494ghsaADVISORY

News mentions

0

No linked articles in our index yet.