AIKIDO-2024-10168
ngx-quill is vulnerable to Improper Use of Validation Framework
60
Medium Risk
This Affects:
ngx-quillTL;DR
Affected versions of this package unintentionally ignore the global QuillEditorComponent sanitation setting, causing HTML input to remain unsanitized.
Who does this affect?
You are affected if you are using a vulnerable version of the package and the global sanitation setting is set to true.
Background info
ngx-quill is vulnerable to Improper Use of Validation Framework in versions 10.0.0 - 26.0.4.
How to fix this
Upgrade the ngx-quill library to the patch version or set the property on component level.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.