Search for packages
Package details: pkg:deb/debian/jquery@3.1.1-2
purl pkg:deb/debian/jquery@3.1.1-2
Next non-vulnerable version 3.3.1~dfsg-3+deb10u1
Latest non-vulnerable version 3.3.1~dfsg-3+deb10u1
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-fhgh-jkwa-aaah
Aliases:
CVE-2020-11023
GHSA-jpcq-cgw6-v4j6
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
3.3.1~dfsg-3+deb10u1
Affected by 0 other vulnerabilities.
VCID-kkd1-e4k1-aaam
Aliases:
CVE-2020-11022
GHSA-gxr4-xjj5-5px2
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
3.3.1~dfsg-3+deb10u1
Affected by 0 other vulnerabilities.
VCID-tv97-anfg-aaam
Aliases:
CVE-2019-11358
GHSA-6c3j-c64m-qhgq
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
3.3.1~dfsg-3
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-3tdt-b5tc-aaak jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. CVE-2015-9251
GHSA-rmxg-73gg-4p98
VCID-7dbv-wt1s-aaak JQuery allows Cross-site Scripting attacks via the `load` method. The `load` method fails to recognize and remove `<script>` HTML tags that contain a whitespace character such as `</script >`. CVE-2020-7656
GHSA-q4m3-2j7h-f7xw

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T16:39:51.654091+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T15:09:06.127073+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:47:43.024979+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T14:21:02.757583+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T12:59:15.526429+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T00:54:39.414267+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah None 36.1.3
2025-06-20T22:54:19.810882+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak None 36.1.3
2025-06-20T22:54:10.260583+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam None 36.1.3
2025-06-20T21:53:41.896531+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak None 36.1.3
2025-06-20T20:56:12.778877+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam None 36.1.3
2025-06-08T09:25:23.380902+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T08:02:41.948094+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:41:05.631212+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T07:14:10.405626+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T05:54:12.597273+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T18:17:00.473141+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah None 36.1.0
2025-06-07T16:17:38.546390+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak None 36.1.0
2025-06-07T16:17:29.419894+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam None 36.1.0
2025-06-07T15:17:03.207147+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak None 36.1.0
2025-06-07T14:24:15.597031+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam None 36.1.0
2025-04-08T07:57:42.443113+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:34:54.331591+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T06:13:33.495017+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:46:43.610240+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T04:26:04.381054+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T16:54:30.873143+00:00 Debian Oval Importer Affected by VCID-fhgh-jkwa-aaah None 36.0.0
2025-04-07T14:49:12.258670+00:00 Debian Oval Importer Fixing VCID-3tdt-b5tc-aaak None 36.0.0
2025-04-07T14:49:02.435074+00:00 Debian Oval Importer Affected by VCID-tv97-anfg-aaam None 36.0.0
2025-04-07T13:48:34.143997+00:00 Debian Oval Importer Fixing VCID-7dbv-wt1s-aaak None 36.0.0
2025-04-07T12:56:43.075543+00:00 Debian Oval Importer Affected by VCID-kkd1-e4k1-aaam None 36.0.0