Datatables

This hub aggregates every CVE we track for Datatables, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Datatables.

• CVE-2025-11031DataTables examples.php path traversal5.3Sep 26, 2025
• CVE-2021-36713Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName parameter to function _fnCreateCookie. NOTE: 1.9.2 is a ...6.1Mar 6, 2023
• CVE-2021-23445Cross-site Scripting (XSS)3.1Sep 27, 2021
• CVE-2020-28458Prototype Pollution7.3Dec 16, 2020
• CVE-2020-8521SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql9.8Jul 7, 2020
• CVE-2020-8519SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql9.8Jul 7, 2020
• CVE-2020-8520SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql9.8Jul 7, 2020
• CVE-2015-6584Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/uni...4.3Sep 11, 2015