jqueryui - security update

Fixed packages 1

Vulnerabilities 4

• Medium 6.5
  CVE-2021-41182 Public exploit EPSS 39%

  XSS in the `altField` option of the Datepicker widget

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value…

  jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2021-41183

  XSS in `*Text` options of the Datepicker widget

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values pas…

  jquery jquery-ui drupal7 jQuery.UI.Combined Debian Ubuntu Alpine npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.5
  CVE-2021-41184 Public exploit EPSS 41%

  XSS in the `of` option of the `.position()` util

  jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value pass…

  jquery jquery-ui jQuery.UI.Combined org.webjars.npm:jquery-ui Debian Ubuntu npm Maven NuGet RubyGems
  Oct 26, 2021
• Medium 6.1
  CVE-2022-31160 Public exploit

  jQuery UI contains potential XSS vulnerability when refreshing a checkboxradio with an HTML-like initial text label

  jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a labe…

  jquery jquery-ui org.webjars.npm:jquery-ui jqueryui Debian Ubuntu npm Maven NuGet RubyGems
  Jul 20, 2022