Description (CNA)
Dioxus Components is a shadcn-style component library for the Dioxus app framework. Prior to commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a, `use_animated_open` formats a string for `eval` with an `id` that can be user supplied. Commit 41e4242ecb1062d04ae42a5215363c1d9fd4e23a patches the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DioxusLabs / components | affected < 41e4242ecb1062d04ae42a5215363c1d9fd4e23a |
CWE
CWE-95, CWE-94
References
- https://github.com/DioxusLabs/components/security/advisories/GHSA-34pj-292j-xr69
- https://github.com/DioxusLabs/components/commit/41e4242ecb1062d04ae42a5215363c1d9fd4e23a
ADP enrichment
No English description supplied.
No references supplied.