dijit (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package dijit, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2018-6561 — CVSS 6.1 (medium): dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload attribute of an SVG element.
• CVE-2020-4051 — CVSS 3.7 (low): In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less…