Medium 1 exploited CVE ELSA-2025-1210 1 CVE

Moderate: tbb security update (Oracle Linux 9)

Published Feb 10, 2025 · Updated Feb 10, 2025

Ecosystem: Oracle Linux

Summary

[2020.3-8.1]
- Remove jQuery from Doxygen output (RHEL-77693)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	python3-tbb	0:2020.3-8.el9_5.1
Oracle Linux · 9	tbb	0:2020.3-8.el9_5.1
Oracle Linux · 9	tbb-devel	0:2020.3-8.el9_5.1
Oracle Linux · 9	tbb-doc	0:2020.3-8.el9_5.1

Vulnerabilities 1

Medium 6.9

CVE-2020-11023 Exploited Public exploit EPSS 85%

Potential XSS vulnerability in jQuery

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems

Apr 29, 2020
KEV Jan 23, 2025