Search for packages
Package details: pkg:npm/jquery-ujs@1.0.4
purl pkg:npm/jquery-ujs@1.0.4
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-gcyr-12v6-aaap Cross-Site Request Forgery (CSRF) in jquery-ujs. GHSA-6qqj-rx4w-r3cj
GMS-2020-740
VCID-jqta-pv21-aaac CSRF vulnerability In the scenario where an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag that will trigger a POST action, the attacker can set the nhref or action to " https://attacker.com" (note the leading space) that will be passed to JQuery, who will see this as a same origin request, and send the user's CSRF token to the attacker domain. GMS-2015-14
VCID-zvqa-f2mq-aaaq Moderate severity vulnerability that affects jquery-rails and jquery-ujs CVE-2015-1840
GHSA-4whc-pp4x-9pf3

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T14:42:17.036680+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 36.1.3
2025-06-20T14:42:16.044366+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 36.1.3
2025-06-03T21:26:05.388138+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 36.1.0
2025-06-03T21:26:03.774687+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 36.1.0
2025-06-02T21:08:06.643325+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 36.1.2
2025-06-02T21:08:04.818289+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 36.1.2
2025-04-03T17:46:09.669672+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 36.0.0
2025-04-03T17:46:06.671683+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 36.0.0
2025-02-18T05:18:20.522117+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 35.1.0
2025-02-18T05:18:20.434200+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 35.1.0
2024-11-21T01:54:28.505595+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 35.0.0
2024-11-19T01:44:36.314989+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.3.2
2024-10-15T17:58:13.857230+00:00 GithubOSV Importer Fixing VCID-gcyr-12v6-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-6qqj-rx4w-r3cj/GHSA-6qqj-rx4w-r3cj.json 34.0.2
2024-10-11T08:35:22.535300+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq https://github.com/nodejs/security-wg/blob/main/vuln/npm/15.json 34.0.2
2024-10-08T02:10:49.184259+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.0.2
2024-10-07T16:08:10.016539+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap https://github.com/advisories/GHSA-6qqj-rx4w-r3cj 34.0.2
2024-09-18T09:26:58.053487+00:00 GithubOSV Importer Fixing VCID-gcyr-12v6-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-6qqj-rx4w-r3cj/GHSA-6qqj-rx4w-r3cj.json 34.0.1
2024-09-17T22:48:19.382321+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq https://github.com/nodejs/security-wg/blob/main/vuln/npm/15.json 34.0.1
2024-09-17T22:43:16.963602+00:00 GitLab Importer Fixing VCID-jqta-pv21-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2015-14.yml 34.0.1
2024-09-17T22:43:16.939801+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.0.1
2024-09-17T22:20:09.903865+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap https://github.com/advisories/GHSA-6qqj-rx4w-r3cj 34.0.1
2024-04-26T06:00:16.095429+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq None 34.0.0rc4
2024-04-26T06:00:15.961307+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq https://github.com/nodejs/security-wg/blob/main/vuln/npm/15.json 34.0.0rc4
2024-04-24T04:38:47.595107+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.0.0rc4
2024-04-24T04:38:47.474635+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc4
2024-04-23T23:18:41.755152+00:00 GithubOSV Importer Fixing VCID-gcyr-12v6-aaap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-6qqj-rx4w-r3cj/GHSA-6qqj-rx4w-r3cj.json 34.0.0rc4
2024-04-23T17:17:23.768443+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap https://github.com/advisories/GHSA-6qqj-rx4w-r3cj 34.0.0rc4
2024-04-23T17:17:23.638166+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc4
2024-01-12T14:16:42.056213+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq None 34.0.0rc2
2024-01-12T14:16:41.735963+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq https://github.com/nodejs/security-wg/blob/main/vuln/npm/15.json 34.0.0rc2
2024-01-10T07:12:17.466293+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.0.0rc2
2024-01-10T07:12:16.658647+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc2
2024-01-09T19:08:28.831157+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap https://github.com/advisories/GHSA-6qqj-rx4w-r3cj 34.0.0rc2
2024-01-09T19:08:28.021307+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc2
2024-01-05T09:57:05.038397+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq None 34.0.0rc1
2024-01-03T23:58:01.009930+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc1
2024-01-03T18:09:22.881558+00:00 Npm Importer Fixing VCID-zvqa-f2mq-aaaq https://github.com/nodejs/security-wg/blob/main/vuln/npm/15.json 34.0.0rc1
2024-01-03T18:05:10.103928+00:00 GitLab Importer Fixing VCID-jqta-pv21-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2015-14.yml 34.0.0rc1
2024-01-03T18:05:10.086229+00:00 GitLab Importer Fixing VCID-gcyr-12v6-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/jquery-ujs/GMS-2020-740.yml 34.0.0rc1
2024-01-03T17:49:01.419682+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap https://github.com/advisories/GHSA-6qqj-rx4w-r3cj 34.0.0rc1
2024-01-03T14:58:36.376491+00:00 GHSA Importer Fixing VCID-gcyr-12v6-aaap None 34.0.0rc1