Description
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jquery | jQuery | >= 1.12.0, < 3.5.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 14 | znc | 1.10.3-1 | — |
| Debian 13 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 13 | znc | No fix yet | — |
| Debian 12 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 12 | znc | No fix yet | — |
| Debian 10 | otrs2 | 6.0.16-2+deb10u1 | DLA-3551-1 |
| Debian 9 | drupal7 | 7.52-2+deb9u10 | DSA-4693-1 |
| Debian 9 | jquery | 3.1.1-2+deb9u2 | DLA-2608-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | jquery | 3.3.1~dfsg-3ubuntu0.1 | USN-7246-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | jquery | 3.2.1-1ubuntu0.1~esm1 | USN-7622-1 |
| Ubuntu Pro 16.04 LTS | drupal7 | 7.44-1ubuntu1~16.04.0+esm3 | USN-7658-1 |
| Ubuntu Pro 16.04 LTS | jquery | 1.11.3+dfsg-4ubuntu0.1~esm1 | USN-7622-1 |
| Ubuntu Pro 14.04 LTS | drupal7 | 7.26-1ubuntu0.1+esm3 | USN-7658-1 |
| Ubuntu Pro 14.04 LTS | jquery | 1.7.2+dfsg-2ubuntu1+esm1 | USN-7622-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | apache-commons-collections | 3.2.2-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-lang | 2.6-21.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-net | 3.6-3.module+el8.3.0+6805+72837426 | RHSA-2020:4847 |
| RHEL 8 | bea-stax +1 | 1.2.0-16.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | bind-dyndb-ldap | 11.3-1.module+el8.3.0+6993+104f8db0 | RHSA-2020:4670 |
| RHEL 8 | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2020:4670 |
| RHEL 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb +3 | 2.2.11-11.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | ipa +9 | 4.8.7-12.module+el8.3.0+8223+6212645f | RHSA-2020:4670 |
| RHEL 8 | ipa-healthcheck +1 | 0.4-6.module+el8.3.0+7711+c4441980 | RHSA-2020:4670 |
| RHEL 8 | ipa-server +4 | 4.8.7-12.module+el8.3.0+8222+c1bff54a | RHSA-2020:4670 |
| RHEL 8 | jackson-core +2 | 2.10.0-1.module+el8.2.0+5059+3eb3af25 | RHSA-2020:4847 |
| RHEL 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.1.0+3832+9784644d | RHSA-2020:4847 |
| RHEL 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | javassist +1 | 3.18.1-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jss +1 | 4.7.3-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+6784+6e1e4c62 | RHSA-2020:4847 |
| RHEL 8 | opendnssec | 2.1.6-2.module+el8.3.0+6580+328a3362 | RHSA-2020:4670 |
| RHEL 8 | pki-ca +8 | 10.9.4-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+6730+8f9c6254 | RHSA-2020:4847 |
| RHEL 8 | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4107+4a66eb87 | RHSA-2020:4670 |
| RHEL 8 | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2020:4670 |
| RHEL 8 | python-nss +2 | 1.0.1-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | python-qrcode +2 | 5.1-12.module+el8.1.0+4107+4a66eb87 | RHSA-2020:4670 |
| RHEL 8 | python-yubico +1 | 1.3.2-9.module+el8.1.0+4107+4a66eb87 | RHSA-2020:4670 |
| RHEL 8 | pyusb +1 | 1.0.0-9.module+el8.1.0+4107+4a66eb87 | RHSA-2020:4670 |
| RHEL 8 | relaxngDatatype | 2011.1-7.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | resteasy | 3.0.26-3.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | slapi-nis | 0.56.5-4.module+el8.3.0+8222+c1bff54a | RHSA-2020:4670 |
| RHEL 8 | slf4j +1 | 1.7.25-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | softhsm +1 | 2.6.0-3.module+el8.3.0+6909+fb33717d | RHSA-2020:4670 |
| RHEL 8 | stax-ex | 1.7.7-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7355+c59bcbd9 | RHSA-2020:4847 |
| RHEL 8 | velocity | 1.7-24.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xalan-j2 | 2.7.1-38.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xerces-j2 | 2.11.0-34.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-apis | 1.4.01-25.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-resolver | 1.2-26.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | xsom | 0-19.20110809svn.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 7 | ipa +11 | 4.6.8-5.el7 | RHSA-2020:3936 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Service Mesh 1 | jaeger | v1.13.1.redhat7-1.el7 | RHSA-2020:2362 |
| Red Hat Service Mesh 1 | kiali | v1.0.11.redhat1-1.el7 | RHSA-2020:2362 |
| Red Hat Service Mesh 1 | servicemesh-grafana +1 | 6.2.2-36.el8 | RHSA-2020:2362 |
| Red Hat Rhev Manager 4 | novnc | 1.1.0-1.el8ost | RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-engine-api-explorer | 0.0.6-1.el8ev | RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-engine-ui-extensions | 1.2.2-1.el8ev | RHSA-2022:6393, RHSA-2020:3807, RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-log-collector | 4.4.7-2.el8ev | RHSA-2022:6393 |
| Red Hat Rhev Manager 4 | ovirt-web-ui | 1.6.4-1.el8ev | RHSA-2022:6393, RHSA-2020:3807 |
| Red Hat Rhev Manager 4 | rhvm +19 | 4.4.1.8-0.7.el8ev | RHSA-2022:6393, RHSA-2020:3807, RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | rhvm-dependencies | 4.4.0-1.el8ev | RHSA-2020:3247 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 18.0.6-1.redhat_00001.1.el7sso | RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043 |
| Red Hat OpenShift 3 | atomic-openshift-web-console | 3.11.219-1.git.1.9b9b889.el7 | RHSA-2020:2217 |
| Red Hat JBoss EAP 7 | eap7-apache-sshd | 2.9.2-1.redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.9.3-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.3.16-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-hibernate-search +5 | 5.10.13-3.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.5.10-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jackson-core +10 | 2.12.7-1.redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-javaee-security-soteria +1 | 1.0.1-3.redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.49-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsf-api_2.3_spec | 3.0.0-6.SP07_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsp-api_2.3_spec | 2.0.0-3.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.27-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-24.Final_redhat_00023.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jettison | 1.5.2-1.redhat_00002.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.2.22-1.SP3_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-wildfly +4 | 7.4.9-4.GA_redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.15.16-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-woodstox-core | 6.4.0-1.redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat Amq Interconnect 1 | qpid-dispatch +4 | 1.13.0-3.el6_10 | RHSA-2020:4211 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | custodia +1 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 | ALSA-2020:4670 |
| AlmaLinux 8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2641+983b221b | ALSA-2020:4670 |
| AlmaLinux 8 | python3-kdcproxy | 0.4-5.module_el8.6.0+2881+2f24dc92 | ALSA-2020:4670 |
| AlmaLinux 8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2641+983b221b | ALSA-2020:4670 |
| AlmaLinux 8 | python3-qrcode +1 | 5.1-12.module_el8.5.0+2641+983b221b | ALSA-2020:4670 |
| AlmaLinux 8 | python3-yubico | 1.3.2-9.module_el8.5.0+2641+983b221b | ALSA-2020:4670 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | bea-stax | 1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | custodia | 0.6.0-3.module+el8.4.0+429+6bd33fea | RLSA-2020:4670 |
| Rocky Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb | 2.2.11-11.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | javassist | 3.18.1-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | ldapjdk | 4.22.0-1.module+el8.4.0+418+b7ae1d4a | RLSA-2020:4847 |
| Rocky Linux 8 | pki-servlet-engine | 1:9.0.30-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | python-jwcrypto | 0.5.0-1.module+el8.4.0+429+6bd33fea | RLSA-2020:4670 |
| Rocky Linux 8 | python-kdcproxy | 0.4-5.module+el8.3.0+244+0b2ae752 | RLSA-2020:4670 |
| Rocky Linux 8 | python-nss | 1.0.1-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | python-qrcode | 5.1-12.module+el8.4.0+429+6bd33fea | RLSA-2020:4670 |
| Rocky Linux 8 | python-yubico | 1.3.2-9.module+el8.4.0+429+6bd33fea | RLSA-2020:4670 |
| Rocky Linux 8 | pyusb | 1.0.0-9.module+el8.4.0+429+6bd33fea | RLSA-2020:4670 |
| Rocky Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | slf4j | 1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | velocity | 1.7-24.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP2 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| SUSE Package Hub 15 SP1 | cacti +1 | 1.2.13-bp151.4.12.1 | openSUSE-SU-2020:1106-1 |
| SUSE Package Hub 15 SP1 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| SUSE Package Hub 12 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| SUSE Package Hub 12 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Server Module 4.1 | cobbler | 3.0.0+git20190806.32c4bae0-5.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | golang-github-QubitProducts-exporter_exporter | 0.4.0-6.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | google-gson | 2.8.5-3.2.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | httpcomponents-client | 4.5.6-3.2.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | httpcomponents-core | 4.4.10-3.2.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | ical4j | 3.0.18-3.2.7 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | mgr-libmod | 4.1.4-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | mgr-osad | 4.1.3-2.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | openvpn-formula | 0.1.1-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | patterns-suse-manager | 4.1-6.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | prometheus-exporters-formula | 0.7.1-3.5.2 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | pxe-default-image-sle15 | 4.1.0-Build5.3 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | saltboot-formula +1 | 0.1.1595937550.0285244-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacecmd | 4.1.6-4.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacewalk-backend | 4.1.14-4.5.2 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacewalk-branding | 4.1.9-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacewalk-java | 4.1.18-3.5.3 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacewalk-utils | 4.1.11-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | spacewalk-web | 4.1.15-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | suseRegisterInfo | 4.1.3-4.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager | 4.1.18-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager-docs_en +1 | 4.1-11.7.2 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager-frontend-libs | 4.1.0-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager-schema +1 | 4.1.12-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager-sls | 4.1.14-3.5.2 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | susemanager-sync-data | 4.1.7-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | uyuni-common-libs | 4.1.6-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | virtual-host-gatherer | 1.0.21-4.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | virtualization-host-formula | 0.5-3.3.1 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.1 | yomi-formula | 0.0.1+git.1595952633.b300be2-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Server Module 4.0 | hibernate5 | 5.3.7-4.3.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | image-sync-formula | 0.1.1595937550.0285244-3.20.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | openvpn-formula | 0.1.1-4.6.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | prometheus-exporters-formula | 0.7.1-3.10.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | salt-netapi-client | 0.17.0-4.6.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | saltboot-formula | 0.1.1595937550.0285244-3.19.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacecmd | 4.0.20-3.19.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-admin | 4.0.11-3.12.1 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-certs-tools | 4.0.17-3.21.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-java | 4.0.37-3.39.1 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-setup | 4.0.14-3.14.1 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-utils | 4.0.18-3.21.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | spacewalk-web | 4.0.23-3.30.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | susemanager | 4.0.28-3.36.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | susemanager-frontend-libs | 4.0.2-4.3.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | susemanager-schema | 4.0.22-3.29.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | susemanager-sls | 4.0.29-3.31.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | susemanager-sync-data | 4.0.18-3.24.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server Module 4.0 | virtualization-host-formula | 0.5-4.12.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Server 3.2 | bind-formula | 0.1.1584363976.36bce64-3.6.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | branch-network-formula | 0.1.1584363976.36bce64-3.9.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | py26-compat-salt | 2016.11.10-6.38.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | python-susemanager-retail | 1.0.1584363976.36bce64-2.12.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | release-notes-susemanager | 3.2.15-6.61.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | spacewalk-backend | 2.8.57.23-3.51.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | spacewalk-client-tools | 2.8.22.8-3.15.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | spacewalk-java | 2.8.78.29-3.50.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | spacewalk-utils | 2.8.18.7-3.15.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | spacewalk-web | 2.8.7.24-3.48.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | susemanager | 3.2.24-3.43.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | susemanager-frontend-libs | 3.2.5-3.13.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | susemanager-schema | 3.2.24-3.40.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Server 3.2 | susemanager-sls | 3.2.31-3.47.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy Module 4.1 | golang-github-QubitProducts-exporter_exporter | 0.4.0-6.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | mgr-osad | 4.1.3-2.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | patterns-suse-manager | 4.1-6.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | spacecmd | 4.1.6-4.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | spacewalk-backend | 4.1.14-4.5.2 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | spacewalk-certs-tools | 4.1.12-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | spacewalk-proxy | 4.1.2-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | spacewalk-web | 4.1.15-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | suseRegisterInfo | 4.1.3-4.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.1 | uyuni-common-libs | 4.1.6-3.3.6 | SUSE-SU-2020:2373-1 |
| SUSE Manager Proxy Module 4.0 | spacecmd | 4.0.20-3.19.2 | SUSE-SU-2020:2650-1 |
| SUSE Manager Proxy Module 4.0 | spacewalk-certs-tools | 4.0.17-3.21.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Proxy Module 4.0 | spacewalk-proxy | 4.0.14-3.10.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Proxy Module 4.0 | spacewalk-web | 4.0.23-3.30.3 | SUSE-SU-2020:2650-1 |
| SUSE Manager Proxy 3.2 | release-notes-susemanager-proxy | 3.2.15-0.16.47.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy 3.2 | spacewalk-backend | 2.8.57.23-3.51.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy 3.2 | spacewalk-client-tools | 2.8.22.8-3.15.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy 3.2 | spacewalk-proxy-installer | 2.8.6.8-3.18.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy 3.2 | spacewalk-web | 2.8.7.24-3.48.1 | SUSE-SU-2020:2292-1 |
| SUSE Manager Proxy 3.2 | zypp-plugin-spacewalk | 1.0.7-3.13.1 | SUSE-SU-2020:2292-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | cacti | 1.2.18-1.2 | openSUSE-SU-2024:10670-1 |
| openSUSE Tumbleweed | syncthing | 2.1.0-1.1 | openSUSE-SU-2026:10764-1 |
| openSUSE Tumbleweed | znc | 1.10.3-1.1 | openSUSE-SU-2026:11782-1 |
| openSUSE Leap 15.2 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.2 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.2 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| openSUSE Leap 15.1 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.1 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.1 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | cacti | 1.2.13-r0 | — |
| Alpine v3.23 | cacti | 1.2.13-r0 | — |
| Alpine v3.22 | cacti | 1.2.13-r0 | — |
| Alpine v3.21 | cacti | 1.2.13-r0 | — |
| Alpine v3.20 | cacti | 1.2.13-r0 | — |
| Alpine v3.20 | drupal7 | 7.70-r0 | — |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | cacti | 1.2.13-r0 | — |
| Alpine v3.19 | drupal7 | 7.70-r0 | — |
| Alpine v3.18 | cacti | 1.2.13-r0 | — |
| Alpine v3.18 | drupal7 | 7.70-r0 | — |
| Alpine v3.17 | cacti | 1.2.13-r0 | — |
| Alpine v3.17 | drupal7 | 7.70-r0 | — |
| Alpine v3.16 | cacti | 1.2.13-r0 | — |
| Alpine v3.16 | drupal7 | 7.70-r0 | — |
| Alpine v3.15 | cacti | 1.2.13-r0 | — |
| Alpine v3.15 | drupal7 | 7.70-r0 | — |
| Alpine v3.14 | cacti | 1.2.13-r0 | — |
| Alpine v3.14 | drupal7 | 7.70-r0 | — |
| Alpine v3.13 | cacti | 1.2.13-r0 | — |
| Alpine v3.13 | drupal7 | 7.70-r0 | — |
| Alpine v3.12 | drupal7 | 7.70-r0 | — |
| Alpine v3.11 | drupal7 | 7.70-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | ipa-client +10 | 4.6.8-5.amzn2 | ALAS2-2020-1519 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | bind-dyndb-ldap | 11.3-1.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | custodia +1 | 0.6.0-3.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-core +2 | 2.2.11-11.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | ipa-client +13 | 4.8.7-12.0.1.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | ipa-healthcheck +1 | 0.4-6.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | javassist +1 | 3.18.1-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jss +1 | 4.7.3-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | opendnssec | 2.1.6-2.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | pki-ca +7 | 10.9.4-1.0.1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | python3-jwcrypto | 0.5.0-1.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | python3-kdcproxy | 0.4-5.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | python3-nss +1 | 1.0.1-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | python3-pyusb | 1.0.0-9.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | python3-qrcode +1 | 5.1-12.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | python3-yubico | 1.3.2-9.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | slapi-nis | 0.56.5-4.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | slf4j +1 | 1.7.25-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | softhsm +1 | 2.6.0-3.module+el8.3.0+7868+2151076c | ELSA-2020-4670 |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 7 | ipa-client +10 | 4.6.8-5.0.1.el7 | ELSA-2020-3936 |
| Oracle Linux 7 | jquery-ui | 1.10.4.custom-4.0.1.el7 | ELSA-2022-9177 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | keycloak-26.6-iamguarded-compat | 26.6.6-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- jQuery 1.2 - Cross-Site Scripting (XSS) EDB-49766 · webapps · Apr 14, 2021
GitHub 3 repositories
-
0xAJ2K/CVE-2020-11022-CVE-2020-11023 ★ 34 · Oct 16, 2021
Little thing put together quickly to demonstrate this CVE
-
Snorlyd/https-nj.gov---CVE-2020-11022 ★ 1 · May 23, 2022
Vulnearability Report of the New Jersey official site
-
okni2k/HW-Pyton-10 ★ 0 · Feb 14, 2026
Домашняя работа по Pyton № 10 CVE-2020-11022 Краткое описание CVE-2020-11022 — уязвимость типа Reflected XSS (межсайтовый скриптинг), связанная с некорректной обработкой пользовательского ввода, кото…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.webjars.npm:jquery | >= 1.12.0, < 3.5.0 | 3.5.0 | GHSA-gxr4-xjj5-5px2 |
| npm | jquery | >= 1.12.0, < 3.5.0 | 3.5.0 | GHSA-gxr4-xjj5-5px2 |
| NuGet | jquery | >= 1.12.0, < 3.5.0 | 3.5.0 | GHSA-gxr4-xjj5-5px2 |
| Packagist | athlon1600/youtube-downloader | < 4.0.1 | 4.0.1 | GHSA-gxr4-xjj5-5px2 |
| Packagist | components/jquery | >= 1.12.0, < 3.5.0 | 3.5.0 | GHSA-gxr4-xjj5-5px2 |
| Packagist | maximebf/debugbar | < 1.19.0 | 1.19.0 | GHSA-gxr4-xjj5-5px2 |
| RubyGems | jquery-rails | < 4.4.0 | 4.4.0 | GHSA-gxr4-xjj5-5px2 |
Advisories 50
- ALSA-2020:4670 Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-4026 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2020:4211 Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0554 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0552 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0553 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2022:6393 Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:4670 Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:3807 Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:3936 Red Hat Security Advisory: ipa security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:3247 Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:2362 Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2023-0239 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2026
- RHSA-2020:4847 Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- WID-SEC-2026-3721 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 4, 2026
- WID-SEC-2022-1347 jQuery: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Oct 4, 2026
- openSUSE-SU-2026:11782-1 znc-1.10.3-1.1 on GA media SUSE / openSUSE Security Updates · Sep 15, 2026
- RHSA-2020:2217 Red Hat Security Advisory: OpenShift Container Platform 3.11 security update Red Hat Security Advisories (RHSA) · Jul 3, 2026
- USN-7658-1 drupal7 vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-7622-1 jquery vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- openSUSE-SU-2026:10764-1 syncthing-2.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 13, 2026
- DSA-4693-1 drupal7 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3551-1 otrs2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2608-1 jquery - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-7246-1 jquery vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- RLSA-2020:4847 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2020:4670 Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2020:1060-1 Security update for cacti, cacti-spine SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1888-1 Security update for otrs SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2292-1 Security update for SUSE Manager Server 3.2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2373-1 Security update for SUSE Manager Server 4.1 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10670-1 cacti-1.2.18-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:2650-1 Security update for SUSE Manager Server 4.0 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:1106-1 Security update for cacti, cacti-spine SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2023-0063 Juniper Junos Space: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2025
- ICSA-25-182-07 Hitachi Energy MSM CISA ICS & IT advisories · Jun 24, 2025
- WID-SEC-2025-1087 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 18, 2025
- VDE-2021-027 Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service CERT@VDE · May 14, 2025
- WID-SEC-2024-3217 Oracle Utilities Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2024
- WID-SEC-2024-1872 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 15, 2024
- ICSA-22-342-02 AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere CISA ICS & IT advisories · Apr 3, 2023
- ICSA-22-097-01 Pepperl+Fuchs WirelessHART-Gateway CISA ICS & IT advisories · Apr 7, 2022
- ELSA-2022-9177 Important: jquery-ui security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 1, 2022
- ELSA-2020-4670 Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020
- ELSA-2020-4847 Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 10, 2020
- ALAS2-2020-1519 Moderate: ipa security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 22, 2020
- ELSA-2020-3936 Moderate: ipa security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020
References
- https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2
- https://github.com/maximebf/php-debugbar/issues/447
- https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77
- https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W
- https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html
- https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html
- https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
- https://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html
- https://security.gentoo.org/glsa/202007-03
- https://www.debian.org/security/2020/dsa-4693
- https://www.drupal.org/sa-core-2020-002
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.tenable.com/security/tns-2020-10
- https://www.tenable.com/security/tns-2020-11
- https://www.tenable.com/security/tns-2021-02
- https://www.tenable.com/security/tns-2021-10
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released
- https://github.com/jquery/jquery/releases/tag/3.5.0
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11022.yml
- https://jquery.com/upgrade-guide/3.5
- https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E
- https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3Ccommits.airflow.apache.org%3E
- https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E
- https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html
- https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B
- http://security.netapp.com/advisory/ntap-20200511-0006