Launchpad.net

CVE 2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.

See the CVE page on Mitre.org for more details.