Description
A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js.
Remediation
References
http://www.securityfocus.com/bid/106434
https://access.redhat.com/errata/RHBA-2019:0959
https://access.redhat.com/errata/RHSA-2019:1422
https://access.redhat.com/errata/RHSA-2019:2552
https://access.redhat.com/errata/RHSA-2019:2551
https://github.com/xtermjs/xterm.js/releases
Related Vulnerabilities
CVE-2020-8137 Vulnerability in npm package fastify
CVE-2013-2115 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-hbase_2-client-service
CVE-2022-22965 Vulnerability in maven package org.springframework.boot:spring-boot-starter-web
CVE-2013-4444 Vulnerability in maven package org.apache.tomcat:tomcat-util