| Package | Affected versions | Patched versions |
|---|---|---|
| kendoreact | ≥ 3.5.0, < 9.4.0 | 9.4.0 |
In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free