Search for packages
| purl | pkg:composer/athlon1600/youtube-downloader@2.0.5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-kkd1-e4k1-aaam
Aliases: CVE-2020-11022 GHSA-gxr4-xjj5-5px2 |
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-20T14:37:26.448027+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/athlon1600/youtube-downloader/CVE-2020-11022.yml | 36.1.3 |
| 2025-06-03T21:21:17.374077+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/athlon1600/youtube-downloader/CVE-2020-11022.yml | 36.1.0 |
| 2025-06-02T21:02:54.262488+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/athlon1600/youtube-downloader/CVE-2020-11022.yml | 36.1.2 |
| 2025-04-03T17:36:27.983855+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/athlon1600/youtube-downloader/CVE-2020-11022.yml | 36.0.0 |