Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/25414?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/25414?format=api", "vulnerability_id": "VCID-zd8d-c1nk-g7a4", "summary": "jquery-validation vulnerable to Cross-site Scripting\nVersions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary.", "aliases": [ { "alias": "CVE-2025-3573" }, { "alias": "GHSA-rrj2-ph5q-jxw2" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/926107?format=api", "purl": "pkg:deb/debian/kalkun@0.8.3.2-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/kalkun@0.8.3.2-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/926106?format=api", "purl": "pkg:deb/debian/kalkun@0.8.4~beta-1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/kalkun@0.8.4~beta-1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/932338?format=api", "purl": "pkg:deb/debian/node-jquery-validation@0?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-jquery-validation@0%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/932337?format=api", "purl": "pkg:deb/debian/node-jquery-validation@1.21.0%2Bdfsg-4?distro=sid", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-jquery-validation@1.21.0%252Bdfsg-4%3Fdistro=sid" }, { "url": "http://public2.vulnerablecode.io/api/packages/935145?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1057174?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-1%2Bdeb13u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-1%252Bdeb13u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/935249?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.2-really%2Bdfsg-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.2-really%252Bdfsg-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/935144?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.3%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.3%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994635?format=api", "purl": "pkg:deb/debian/znuny@6.5.15-2~bpo12%2B1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.15-2~bpo12%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/943995?format=api", "purl": "pkg:deb/debian/znuny@6.5.16-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.16-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994637?format=api", "purl": "pkg:deb/debian/znuny@6.5.18-1~bpo13%2B1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.18-1~bpo13%252B1" }, { "url": "http://public2.vulnerablecode.io/api/packages/943988?format=api", "purl": "pkg:deb/debian/znuny@6.5.19-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.19-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1088742?format=api", "purl": "pkg:deb/debian/znuny@6.5.20-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.20-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/68646?format=api", "purl": "pkg:npm/jquery-validation@1.20.0", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.20.0" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/935143?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-na3j-h3qr-k7dc" }, { "vulnerability": "VCID-ndjn-p6gb-u7g4" }, { "vulnerability": "VCID-rqy8-n6fr-hqey" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994404?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.0.4%2Bdfsg2-2%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2wka-nyka-9fbz" }, { "vulnerability": "VCID-araw-4wdy-hqcz" }, { "vulnerability": "VCID-na3j-h3qr-k7dc" }, { "vulnerability": "VCID-ndjn-p6gb-u7g4" }, { "vulnerability": "VCID-rqy8-n6fr-hqey" }, { "vulnerability": "VCID-ym9b-4su6-6fbr" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.0.4%252Bdfsg2-2%252Bdeb11u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/994405?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/935141?format=api", "purl": "pkg:deb/debian/phpmyadmin@4:5.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/phpmyadmin@4:5.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/943986?format=api", "purl": "pkg:deb/debian/znuny@6.5.1-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-169g-wxmh-qqbw" }, { "vulnerability": "VCID-1mkr-c1ay-jygw" }, { "vulnerability": "VCID-2rbn-u9eg-sua7" }, { "vulnerability": "VCID-4sdd-c9p8-3fac" }, { "vulnerability": "VCID-cqx8-tegf-pfhh" }, { "vulnerability": "VCID-kfqh-mtw2-3feu" }, { "vulnerability": "VCID-kr13-v6jr-5kg6" }, { "vulnerability": "VCID-ndgh-dr9p-kqbu" }, { "vulnerability": "VCID-qysv-aehy-d7ay" }, { "vulnerability": "VCID-s8fu-wpk4-3ycc" }, { "vulnerability": "VCID-x1sc-wvc6-a3hz" }, { "vulnerability": "VCID-yrdb-btgm-p3cd" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" }, { "vulnerability": "VCID-zhfb-ajkc-5uc4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994634?format=api", "purl": "pkg:deb/debian/znuny@6.5.1-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-169g-wxmh-qqbw" }, { "vulnerability": "VCID-1mkr-c1ay-jygw" }, { "vulnerability": "VCID-2rbn-u9eg-sua7" }, { "vulnerability": "VCID-4sdd-c9p8-3fac" }, { "vulnerability": "VCID-cqx8-tegf-pfhh" }, { "vulnerability": "VCID-kfqh-mtw2-3feu" }, { "vulnerability": "VCID-kr13-v6jr-5kg6" }, { "vulnerability": "VCID-ndgh-dr9p-kqbu" }, { "vulnerability": "VCID-qysv-aehy-d7ay" }, { "vulnerability": "VCID-s8fu-wpk4-3ycc" }, { "vulnerability": "VCID-x1sc-wvc6-a3hz" }, { "vulnerability": "VCID-yrdb-btgm-p3cd" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" }, { "vulnerability": "VCID-zhfb-ajkc-5uc4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.1-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/943989?format=api", "purl": "pkg:deb/debian/znuny@6.5.15-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4sdd-c9p8-3fac" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" }, { "vulnerability": "VCID-zhfb-ajkc-5uc4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.15-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/994636?format=api", "purl": "pkg:deb/debian/znuny@6.5.15-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4sdd-c9p8-3fac" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" }, { "vulnerability": "VCID-zhfb-ajkc-5uc4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/znuny@6.5.15-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/224705?format=api", "purl": "pkg:npm/jquery-validation@1.13.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.13.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/224706?format=api", "purl": "pkg:npm/jquery-validation@1.14.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.14.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224707?format=api", "purl": "pkg:npm/jquery-validation@1.15.0-pre", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.0-pre" }, { "url": "http://public2.vulnerablecode.io/api/packages/224708?format=api", "purl": "pkg:npm/jquery-validation@1.15.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224709?format=api", "purl": "pkg:npm/jquery-validation@1.15.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.15.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/224710?format=api", "purl": "pkg:npm/jquery-validation@1.16.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.16.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224711?format=api", "purl": "pkg:npm/jquery-validation@1.17.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.17.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224712?format=api", "purl": "pkg:npm/jquery-validation@1.18.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.18.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224713?format=api", "purl": "pkg:npm/jquery-validation@1.19.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/224714?format=api", "purl": "pkg:npm/jquery-validation@1.19.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/224715?format=api", "purl": "pkg:npm/jquery-validation@1.19.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-a286-32jj-eubk" }, { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/74351?format=api", "purl": "pkg:npm/jquery-validation@1.19.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/314700?format=api", "purl": "pkg:npm/jquery-validation@1.19.4-pre", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-apr7-9vue-3uhr" }, { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.4-pre" }, { "url": "http://public2.vulnerablecode.io/api/packages/81508?format=api", "purl": "pkg:npm/jquery-validation@1.19.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/759297?format=api", "purl": "pkg:npm/jquery-validation@1.19.5-pre", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-dgq1-519m-6ubb" }, { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.5-pre" }, { "url": "http://public2.vulnerablecode.io/api/packages/81417?format=api", "purl": "pkg:npm/jquery-validation@1.19.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zd8d-c1nk-g7a4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:npm/jquery-validation@1.19.5" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-3573.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-3573.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3573", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.47999", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.48", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.47983", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.48003", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.48023", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.47952", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00247", "scoring_system": "epss", "scoring_elements": "0.48005", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53047", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53038", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53072", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.5309", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53083", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53045", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53114", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53042", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53015", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.5305", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53008", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.52957", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00297", "scoring_system": "epss", "scoring_elements": "0.53007", "published_at": "2026-04-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-3573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3573" }, { "reference_url": "https://github.com/jquery-validation/jquery-validation", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/jquery-validation/jquery-validation" }, { "reference_url": "https://github.com/jquery-validation/jquery-validation/commit/7a490d8f39bd988027568ddcf51755e1f4688902", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/jquery-validation/jquery-validation/commit/7a490d8f39bd988027568ddcf51755e1f4688902" }, { "reference_url": "https://github.com/jquery-validation/jquery-validation/pull/2462", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/jquery-validation/jquery-validation/pull/2462" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3573", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3573" }, { "reference_url": "https://security.snyk.io/vuln/SNYK-JS-JQUERYVALIDATION-5952285", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.snyk.io/vuln/SNYK-JS-JQUERYVALIDATION-5952285" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103445", "reference_id": "1103445", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103445" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104134", "reference_id": "1104134", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104134" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104135", "reference_id": "1104135", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104135" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104136", "reference_id": "1104136", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104136" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359682", "reference_id": "2359682", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2359682" }, { "reference_url": "https://github.com/advisories/GHSA-rrj2-ph5q-jxw2", "reference_id": "GHSA-rrj2-ph5q-jxw2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rrj2-ph5q-jxw2" } ], "weaknesses": [ { "cwe_id": 79, "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "description": "The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zd8d-c1nk-g7a4" }