Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/jquery@3.0.0-rc.1
purl pkg:npm/jquery@3.0.0-rc.1
Tags Ghost
Next non-vulnerable version 3.5.0
Latest non-vulnerable version 3.5.0
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-hent-wkr8-c7hb
Aliases:
CVE-2016-10707
GHSA-mhpp-875w-9cpv
Denial of Service in jquery Affected versions of `jquery` use a lowercasing logic on attribute names. When given a boolean attribute with a name that contains uppercase characters, `jquery` enters into an infinite recursion loop, exceeding the call stack limit, and resulting in a denial of service condition.
3.0.0
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:54:46.843314+00:00 Npm Importer Affected by VCID-hent-wkr8-c7hb https://github.com/nodejs/security-wg/blob/main/vuln/npm/330.json 38.0.0
2026-04-01T15:56:26.326561+00:00 GHSA Importer Affected by VCID-hent-wkr8-c7hb https://github.com/advisories/GHSA-mhpp-875w-9cpv 38.0.0
2026-04-01T13:03:46.545037+00:00 GithubOSV Importer Affected by VCID-hent-wkr8-c7hb https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/01/GHSA-mhpp-875w-9cpv/GHSA-mhpp-875w-9cpv.json 38.0.0
2026-04-01T12:47:32.907503+00:00 GitLab Importer Affected by VCID-hent-wkr8-c7hb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery/CVE-2016-10707.yml 38.0.0