CVE-2021-23445: Datatables Datatables.net

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

Affected products

• Datatables Datatables.net: before 1.11.3 (fixed in 1.11.3)

Published 2021-09-27. Last modified 2026-06-17.