Summary
[1.10.4.custom-4.0.1]
- Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 [Orabug: 33869588]
[1.10.4.custom-4]
- removed %%defattr from specfile
- removed Group from specfile
- removed BuildRoot from specfiles
* Tue May 10 2016 Grant Gainey 1.10.4.custom-3
- jquery-ui: build on openSUSE
[1.10.4.custom-2]
- fix jquery-ui source url
[1.10.4.custom-1]
- initial jquery-ui build
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | jquery-ui | 0:1.10.4.custom-4.0.1.el7 |
Vulnerabilities 2
-
Medium 6.9
Potential XSS vulnerability in jQuery
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…
KEV Jan 23, 2025 -
Medium 6.9
jQuery has a potential XSS vulnerability
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…