Potential XSS vulnerability in jQuery
Affected range
SEMVER: introduced 1.0.3; fixed 3.5.0Fixed versions: 3.5.0
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
4.0.0
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
High
8 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-mhpp-875w-9cpv high
Denial of Service in jquery
Affected range
SEMVER: introduced 3.0.0-rc.1; fixed 3.0.0Fixed versions: 3.0.0
GHSA-gxr4-xjj5-5px2 moderate
Potential XSS vulnerability in jQuery
Affected range
SEMVER: introduced 1.12.0; fixed 3.5.0Fixed versions: 3.5.0
GHSA-q4m3-2j7h-f7xw moderate
Cross-Site Scripting in jquery
Affected range
SEMVER: introduced 1.2.1; fixed 1.9.0Fixed versions: 1.9.0
GHSA-6c3j-c64m-qhgq moderate
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Affected range
SEMVER: introduced 1.1.4; fixed 3.4.0Fixed versions: 3.4.0
GHSA-579v-mp3v-rrw5 moderate
jQuery vulnerable to Cross-Site Scripting (XSS)
Affected range
SEMVER: introduced 0; fixed 1.6.3Fixed versions: 1.6.3
GHSA-rmxg-73gg-4p98 moderate
Cross-Site Scripting (XSS) in jquery
Affected range
SEMVER: introduced 0; fixed 1.12.2SEMVER: introduced 1.12.3; fixed 3.0.0Fixed versions: 1.12.2, 3.0.0
GHSA-2pqj-h3vj-pqgw moderate
Cross-Site Scripting in jquery
Affected range
SEMVER: introduced 0; fixed 1.9.0Fixed versions: 1.9.0