Search for packages
purl | pkg:nuget/jQuery@1.2.0 |
Tags | Ghost |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-kkd1-e4k1-aaam
Aliases: CVE-2020-11022 GHSA-gxr4-xjj5-5px2 |
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |
Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
---|---|---|---|---|---|
2024-11-19T15:48:04.504304+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/jQuery/CVE-2020-11022.yml | 34.3.2 |
2024-09-17T22:45:49.811170+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/jQuery/CVE-2020-11022.yml | 34.0.1 |
2024-04-23T17:43:35.571811+00:00 | GitLab Importer | Affected by | VCID-kkd1-e4k1-aaam | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/jQuery/CVE-2020-11022.yml | 34.0.0rc4 |