Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/jquery@1.7.1
purl pkg:npm/jquery@1.7.1
Tags Ghost
Next non-vulnerable version 3.5.0
Latest non-vulnerable version 3.5.0
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-xdph-4cg9-6qah
Aliases:
CVE-2012-6708
GHSA-2pqj-h3vj-pqgw
The jQuery library, which is included in rdoc, is vulnerable to Cross-site Scripting (XSS) attacks. jQuery only deems the input to be HTML if it explicitly starts with the `<` character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
1.9.0
Affected by 0 other vulnerabilities.
1.9.1
Affected by 7 other vulnerabilities.
VCID-zkj3-gw4w-mybq
Aliases:
GMS-2017-121
XSS via improper selector detection jQuery's main method in affected versions contains an unreliable way of detecting whether the input to the `jQuery(strInput)` function is intended to be a selector or HTML.
1.9.1
Affected by 7 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T12:37:05.065183+00:00 GitLab Importer Affected by VCID-xdph-4cg9-6qah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery/CVE-2012-6708.yml 38.0.0
2026-04-01T12:47:11.973603+00:00 GitLab Importer Affected by VCID-zkj3-gw4w-mybq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery/GMS-2017-121.yml 38.0.0