Moderate severity vulnerability that affects ember (GHSA-vxp4-25qp-86qh)
Published: 2017-10-24T18:33:36Z
Severity: MODERATE · CWE: 

Withdrawn, accidental duplicate publish.

Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script or HTML.

Affected packages:
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 1.8.0
fixed: 1.11.4
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 1.12.0
fixed: 1.12.2
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 1.13.0
fixed: 1.13.12
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 2.0.0
fixed: 2.0.3
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 2.1.0
fixed: 2.1.2
package: ecosystem: npm
name: ember
ranges: type: ECOSYSTEM
events: introduced: 2.2.0
fixed: 2.2.1