Description
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jquery | jQuery | >= 1.0.3, < 3.5.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 14 | znc | 1.10.3-1 | — |
| Debian 13 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 13 | znc | No fix yet | — |
| Debian 12 | node-jquery | 3.5.0+dfsg-2 | — |
| Debian 12 | znc | No fix yet | — |
| Debian 10 | otrs2 | 6.0.16-2+deb10u1 | DLA-3551-1 |
| Debian 9 | drupal7 | 7.52-2+deb9u10 | DSA-4693-1 |
| Debian 9 | jquery | 3.1.1-2+deb9u2 | DLA-2608-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | jquery | 3.3.1~dfsg-3ubuntu0.1 | USN-7246-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | jquery | 3.2.1-1ubuntu0.1~esm1 | USN-7622-1 |
| Ubuntu Pro 16.04 LTS | drupal7 | 7.44-1ubuntu1~16.04.0+esm3 | USN-7658-1 |
| Ubuntu Pro 16.04 LTS | jquery | 1.11.3+dfsg-4ubuntu0.1~esm1 | USN-7622-1 |
| Ubuntu Pro 14.04 LTS | drupal7 | 7.26-1ubuntu0.1+esm3 | USN-7658-1 |
| Ubuntu Pro 14.04 LTS | jquery | 1.7.2+dfsg-2ubuntu1+esm1 | USN-7622-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | cpp +25 | 11.5.0-5.el9_5 | RHSA-2025:1346, RHSA-2025:1309, RHSA-2025:1300 |
| RHEL 9 | doxygen +2 | 1:1.9.1-12.el9_5 | RHSA-2025:1329 |
| RHEL 9 | gcc-toolset-14-gcc +16 | 14.2.1-1.3.el9_5 | RHSA-2025:1300 |
| RHEL 9 | libasan8 +18 | 13.3.1-2.2.el9_5 | RHSA-2025:1309, RHSA-2025:1300 |
| RHEL 9 | tbb +3 | 2020.3-8.el9_5.1 | RHSA-2025:1210 |
| RHEL 8 | apache-commons-collections | 3.2.2-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-lang | 2.6-21.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | apache-commons-net | 3.6-3.module+el8.3.0+6805+72837426 | RHSA-2020:4847 |
| RHEL 8 | bea-stax +1 | 1.2.0-16.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2021:1846 |
| RHEL 8 | cpp +27 | 8.5.0-23.el8_10 | RHSA-2025:1338, RHSA-2025:1306, RHSA-2025:1301 |
| RHEL 8 | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2021:1846 |
| RHEL 8 | doxygen +2 | 1:1.8.14-13.el8_10 | RHSA-2025:1314 |
| RHEL 8 | gcc-toolset-14-gcc +16 | 14.2.1-7.1.el8_10 | RHSA-2025:1338 |
| RHEL 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb +3 | 2.2.11-11.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | ipa +9 | 4.9.2-3.module+el8.4.0+10413+a92f1bfa | RHSA-2021:1846 |
| RHEL 8 | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9008+94c5103b | RHSA-2021:1846 |
| RHEL 8 | ipa-server +5 | 4.9.2-3.module+el8.4.0+10412+5ecb5b37 | RHSA-2021:1846 |
| RHEL 8 | jackson-core +2 | 2.10.0-1.module+el8.2.0+5059+3eb3af25 | RHSA-2020:4847 |
| RHEL 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.1.0+3832+9784644d | RHSA-2020:4847 |
| RHEL 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | javassist +1 | 3.18.1-8.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | jss +1 | 4.7.3-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+6784+6e1e4c62 | RHSA-2020:4847 |
| RHEL 8 | libasan8 +18 | 13.3.1-2.2.el8_10 | RHSA-2025:1338, RHSA-2025:1306 |
| RHEL 8 | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2021:1846 |
| RHEL 8 | pcs +1 | 0.10.10-4.el8 | RHSA-2021:4142 |
| RHEL 8 | pki-ca +8 | 10.9.4-1.module+el8.3.0+8058+d5cd4219 | RHSA-2020:4847 |
| RHEL 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+6730+8f9c6254 | RHSA-2020:4847 |
| RHEL 8 | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4107+4a66eb87 | RHSA-2021:1846 |
| RHEL 8 | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2021:1846 |
| RHEL 8 | python-nss +2 | 1.0.1-10.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | python-qrcode +2 | 5.1-12.module+el8.1.0+4107+4a66eb87 | RHSA-2021:1846 |
| RHEL 8 | python-yubico +1 | 1.3.2-9.module+el8.1.0+4107+4a66eb87 | RHSA-2021:1846 |
| RHEL 8 | pyusb +1 | 1.0.0-9.module+el8.1.0+4107+4a66eb87 | RHSA-2021:1846 |
| RHEL 8 | relaxngDatatype | 2011.1-7.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | resteasy | 3.0.26-3.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | slapi-nis | 0.56.6-1.module+el8.4.0+9005+f55ff3e7 | RHSA-2021:1846 |
| RHEL 8 | slf4j +1 | 1.7.25-4.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2021:1846 |
| RHEL 8 | stax-ex | 1.7.7-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | tbb +3 | 2018.2-10.el8_10.1 | RHSA-2025:1215 |
| RHEL 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7355+c59bcbd9 | RHSA-2020:4847 |
| RHEL 8 | velocity | 1.7-24.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xalan-j2 | 2.7.1-38.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xerces-j2 | 2.11.0-34.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-apis | 1.4.01-25.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xml-commons-resolver | 1.2-26.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 8 | xmlstreambuffer | 1.5.4-8.module+el8.2.0+5723+4574fbff | RHSA-2020:4847 |
| RHEL 8 | xsom | 0-19.20110809svn.module+el8.1.0+3366+6dfb954c | RHSA-2020:4847 |
| RHEL 7 | ipa +11 | 4.6.8-5.el7_9.4 | RHSA-2021:0860 |
| RHEL 7 | pcs +1 | 0.9.169-3.el7_9.3 | RHSA-2022:7343 |
| RHEL 7 | pki-ca +8 | 10.5.18-12.el7_9 | RHSA-2021:0851 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Service Mesh 1 | ior +10 | 1.1.6-1.el8 | RHSA-2020:3369 |
| Red Hat Service Mesh 1 | kiali | v1.12.10.redhat2-1.el7 | RHSA-2020:3369 |
| Red Hat Service Mesh 1 | servicemesh-grafana +1 | 6.4.3-13.el8 | RHSA-2020:3369 |
| Red Hat Service Mesh 1 | servicemesh-operator | 1.1.6-2.el8 | RHSA-2020:3369 |
| Red Hat Service Mesh 1 | servicemesh-prometheus | 2.14.0-14.el8 | RHSA-2020:3369 |
| Red Hat Rhev Manager 4 | novnc | 1.1.0-1.el8ost | RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-engine-api-explorer | 0.0.6-1.el8ev | RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-engine-ui-extensions | 1.2.2-1.el8ev | RHSA-2022:6393, RHSA-2020:3807, RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | ovirt-log-collector | 4.4.7-2.el8ev | RHSA-2022:6393 |
| Red Hat Rhev Manager 4 | ovirt-web-ui | 1.6.4-1.el8ev | RHSA-2022:6393, RHSA-2020:3807 |
| Red Hat Rhev Manager 4 | rhvm +19 | 4.4.1.8-0.7.el8ev | RHSA-2022:6393, RHSA-2020:3807, RHSA-2020:3247 |
| Red Hat Rhev Manager 4 | rhvm-dependencies | 4.4.0-1.el8ev | RHSA-2020:3247 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 18.0.6-1.redhat_00001.1.el7sso | RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043 |
| RHEL 9.4 EUS | cpp +25 | 11.4.1-4.el9_4 | RHSA-2025:1342, RHSA-2025:1304 |
| RHEL 9.4 EUS | doxygen +2 | 1:1.9.1-12.el9_4 | RHSA-2025:1315 |
| RHEL 9.4 EUS | libasan8 +18 | 13.3.1-2.2.el9_4 | RHSA-2025:1342 |
| RHEL 9.4 EUS | tbb +3 | 2020.3-8.el9_4.1 | RHSA-2025:1211 |
| RHEL 9.2 EUS | cpp +25 | 11.3.1-4.4.el9_2 | RHSA-2025:1303 |
| RHEL 9.2 EUS | doxygen +2 | 1:1.9.1-12.el9_2 | RHSA-2025:1185 |
| RHEL 9.2 EUS | tbb +3 | 2020.3-8.el9_2.1 | RHSA-2025:1209 |
| RHEL 9.0 E4S | cpp +23 | 11.2.1-9.5.el9_0 | RHSA-2025:1305 |
| RHEL 9.0 E4S | tbb +3 | 2020.3-8.el9_0.1 | RHSA-2025:1213 |
| RHEL 8.8 EUS | cpp +25 | 8.5.0-18.3.el8_8 | RHSA-2025:1311 |
| RHEL 8.8 EUS | doxygen +2 | 1:1.8.14-13.el8_8 | RHSA-2025:1247 |
| RHEL 8.8 EUS | tbb +3 | 2018.2-10.el8_8.1 | RHSA-2025:1214 |
| RHEL 8.6 TUS | cpp +22 | 8.5.0-10.4.el8_6 | RHSA-2025:1308 |
| RHEL 8.6 TUS | tbb +3 | 2018.2-10.el8_6.1 | RHSA-2025:1216 |
| RHEL 8.6 E4S | cpp +22 | 8.5.0-10.4.el8_6 | RHSA-2025:1308 |
| RHEL 8.6 E4S | tbb +3 | 2018.2-10.el8_6.1 | RHSA-2025:1216 |
| RHEL 8.6 AUS | cpp +22 | 8.5.0-10.4.el8_6 | RHSA-2025:1308 |
| RHEL 8.6 AUS | tbb +3 | 2018.2-10.el8_6.1 | RHSA-2025:1216 |
| RHEL 8.4 TUS | cpp +22 | 8.4.1-1.4.el8_4 | RHSA-2025:1312 |
| RHEL 8.4 TUS | tbb +3 | 2018.2-10.el8_4.1 | RHSA-2025:1212 |
| RHEL 8.4 E4S | cpp +22 | 8.4.1-1.4.el8_4 | RHSA-2025:1312 |
| RHEL 8.4 E4S | tbb +3 | 2018.2-10.el8_4.1 | RHSA-2025:1212 |
| RHEL 8.4 AUS | cpp +22 | 8.4.1-1.4.el8_4 | RHSA-2025:1312 |
| RHEL 8.4 AUS | tbb +3 | 2018.2-10.el8_4.1 | RHSA-2025:1212 |
| RHEL 8.2 AUS | bind-dyndb-ldap | 11.2-3.module+el8.2.0+21753+7109ce90.3 | RHSA-2025:1515 |
| RHEL 8.2 AUS | cpp +22 | 8.3.1-8.el8_2 | RHSA-2025:1310 |
| RHEL 8.2 AUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | ipa +12 | 4.8.4-14.module+el8.2.0+22854+05081d30.5 | RHSA-2025:1515 |
| RHEL 8.2 AUS | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2025:1515 |
| RHEL 8.2 AUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2025:1515 |
| RHEL 8.2 AUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2025:1515 |
| RHEL 8.2 AUS | slapi-nis | 0.56.3-3.module+el8.2.0+10782+8facb0b2 | RHSA-2025:1515 |
| RHEL 8.2 AUS | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2025:1515 |
| RHEL 8.2 AUS | tbb +3 | 2018.2-9.el8_2.1 | RHSA-2025:1217 |
| RHEL 7.7 AUS | cpp +38 | 4.8.5-40.el7_7 | RHSA-2025:1580 |
| RHEL 7.7 AUS | doxygen +2 | 1:1.8.5-3.el7_7.1 | RHSA-2025:1256 |
| RHEL 7.7 AUS | ipa +11 | 4.6.5-11.el7_7.5 | RHSA-2025:1514 |
| RHEL 7.7 AUS | pki-ca +8 | 10.5.16-8.el7_7 | RHSA-2025:2426 |
| RHEL 7 ELS | cpp +38 | 4.8.5-45.el7_9 | RHSA-2025:1601 |
| RHEL 7 ELS | doxygen +2 | 1:1.8.5-4.el7_9.1 | RHSA-2025:1255 |
| Red Hat OpenStack 16 | python-XStatic-jQuery224 +1 | 2.2.4.1-3.el8ost | RHSA-2020:5412 |
| Red Hat OpenStack 16 | python-django20 +1 | 2.0.13-19.el8ost | RHSA-2025:1070 |
| Red Hat JBoss EAP 7 | eap7-apache-sshd | 2.9.2-1.redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-elytron-web +1 | 1.9.3-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-hal-console | 3.3.16-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-hibernate-search +5 | 5.10.13-3.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.5.10-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jackson-core +10 | 2.12.7-1.redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-javaee-security-soteria +1 | 1.0.1-3.redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.49-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsf-api_2.3_spec | 3.0.0-6.SP07_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-jsp-api_2.3_spec | 2.0.0-3.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-remoting | 5.0.27-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-24.Final_redhat_00023.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-jettison | 1.5.2-1.redhat_00002.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.2.22-1.SP3_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-wildfly +4 | 7.4.9-4.GA_redhat_00003.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-wildfly-elytron +1 | 1.15.16-1.Final_redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat JBoss EAP 7 | eap7-woodstox-core | 6.4.0-1.redhat_00001.1.el7eap | RHSA-2023:0554, RHSA-2023:0553, RHSA-2023:0552 |
| Red Hat Amq Interconnect 1 | qpid-dispatch +4 | 1.13.0-3.el6_10 | RHSA-2020:4211 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | cpp +25 | 11.5.0-5.el9_5.alma.1 | ALSA-2025:1346, ALSA-2025:1309, ALSA-2025:1300 |
| AlmaLinux 9 | doxygen +2 | 1:1.9.1-12.el9_5 | ALSA-2025:1329 |
| AlmaLinux 9 | gcc-toolset-14-gcc +16 | 14.2.1-1.3.el9_5 | ALSA-2025:1300 |
| AlmaLinux 9 | libasan8 +18 | 13.3.1-2.2.el9_5 | ALSA-2025:1309, ALSA-2025:1300 |
| AlmaLinux 9 | tbb +3 | 2020.3-8.el9_5.1 | ALSA-2025:1210 |
| AlmaLinux 8 | bind-dyndb-ldap | 11.6-2.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | cpp +27 | 8.5.0-23.el8_10.alma.1 | ALSA-2025:1338, ALSA-2025:1306, ALSA-2025:1301 |
| AlmaLinux 8 | custodia +1 | 0.6.0-3.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | doxygen +2 | 1:1.8.14-13.el8_10 | ALSA-2025:1314 |
| AlmaLinux 8 | gcc-toolset-14-gcc +16 | 14.2.1-7.1.el8_10 | ALSA-2025:1338 |
| AlmaLinux 8 | libasan8 +18 | 13.3.1-2.2.el8_10 | ALSA-2025:1338, ALSA-2025:1306 |
| AlmaLinux 8 | opendnssec | 2.1.7-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | pcs +1 | 0.10.10-4.el8.alma | ALSA-2021:4142 |
| AlmaLinux 8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | python3-kdcproxy | 0.4-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | python3-qrcode +1 | 5.1-12.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | python3-yubico | 1.3.2-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | softhsm +1 | 2.6.0-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1846 |
| AlmaLinux 8 | tbb +3 | 2018.2-10.el8_10.1 | ALSA-2025:1215 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | doxygen | 1:1.9.1-12.el9_5 | RLSA-2025:1329 |
| Rocky Linux 9 | gcc | 11.5.0-5.el9_5 | RLSA-2025:1346 |
| Rocky Linux 9 | gcc-toolset-13-gcc | 13.3.1-2.2.el9_5 | RLSA-2025:1309 |
| Rocky Linux 9 | gcc-toolset-14-gcc | 14.2.1-1.3.el9_5 | RLSA-2025:1300 |
| Rocky Linux 9 | tbb | 2020.3-8.el9_5.1 | RLSA-2025:1210 |
| Rocky Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | bea-stax | 1.2.0-16.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | custodia | 0.6.0-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | doxygen | 1:1.8.14-13.el8_10 | RLSA-2025:1314 |
| Rocky Linux 8 | gcc | 8.5.0-23.el8_10 | RLSA-2025:1301 |
| Rocky Linux 8 | gcc-toolset-13-gcc | 13.3.1-2.2.el8_10 | RLSA-2025:1306 |
| Rocky Linux 8 | gcc-toolset-14-gcc | 14.2.1-7.1.el8_10 | RLSA-2025:1338 |
| Rocky Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb | 2.2.11-11.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | ipa | 4.9.2-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | ipa-healthcheck | 0.7-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-jaxrs-providers | 2.9.9-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | javassist | 3.18.1-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | ldapjdk | 4.22.0-1.module+el8.4.0+418+b7ae1d4a | RLSA-2020:4847 |
| Rocky Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | pcs | 0.10.10-4.el8 | RLSA-2021:4142 |
| Rocky Linux 8 | pki-servlet-engine | 1:9.0.30-1.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | python-jwcrypto | 0.5.0-1.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | python-kdcproxy | 0.4-5.module+el8.3.0+244+0b2ae752 | RLSA-2021:1846 |
| Rocky Linux 8 | python-nss | 1.0.1-10.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | python-qrcode | 5.1-12.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | python-yubico | 1.3.2-9.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | pyusb | 1.0.0-9.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | slf4j | 1.7.25-4.module+el8.3.0+74+855e3f5d | RLSA-2020:4847 |
| Rocky Linux 8 | softhsm | 2.6.0-5.module+el8.4.0+429+6bd33fea | RLSA-2021:1846 |
| Rocky Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | tbb | 2018.2-10.el8_10.1 | RLSA-2025:1215 |
| Rocky Linux 8 | velocity | 1.7-24.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
| Rocky Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+53+ea062990 | RLSA-2020:4847 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP2 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| SUSE Package Hub 15 SP1 | cacti +1 | 1.2.13-bp151.4.12.1 | openSUSE-SU-2020:1106-1 |
| SUSE Package Hub 15 SP1 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| SUSE Package Hub 12 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| SUSE Package Hub 12 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.2 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.2 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.2 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
| openSUSE Leap 15.1 | cacti | 1.2.13-11.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.1 | cacti-spine | 1.2.13-8.1 | openSUSE-SU-2020:1060-1 |
| openSUSE Leap 15.1 | otrs | 6.0.30-bp152.2.11.1 | openSUSE-SU-2020:1888-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | cacti | 1.2.13-r0 | — |
| Alpine v3.23 | cacti | 1.2.13-r0 | — |
| Alpine v3.22 | cacti | 1.2.13-r0 | — |
| Alpine v3.21 | cacti | 1.2.13-r0 | — |
| Alpine v3.20 | cacti | 1.2.13-r0 | — |
| Alpine v3.20 | drupal7 | 7.70-r0 | — |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | cacti | 1.2.13-r0 | — |
| Alpine v3.19 | drupal7 | 7.70-r0 | — |
| Alpine v3.18 | cacti | 1.2.13-r0 | — |
| Alpine v3.18 | drupal7 | 7.70-r0 | — |
| Alpine v3.17 | cacti | 1.2.13-r0 | — |
| Alpine v3.17 | drupal7 | 7.70-r0 | — |
| Alpine v3.16 | cacti | 1.2.13-r0 | — |
| Alpine v3.16 | drupal7 | 7.70-r0 | — |
| Alpine v3.15 | cacti | 1.2.13-r0 | — |
| Alpine v3.15 | drupal7 | 7.70-r0 | — |
| Alpine v3.14 | cacti | 1.2.13-r0 | — |
| Alpine v3.14 | drupal7 | 7.70-r0 | — |
| Alpine v3.13 | cacti | 1.2.13-r0 | — |
| Alpine v3.13 | drupal7 | 7.70-r0 | — |
| Alpine v3.12 | drupal7 | 7.70-r0 | — |
| Alpine v3.11 | drupal7 | 7.70-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | ipa-client +10 | 4.6.8-5.amzn2.4.1 | ALAS2-2021-1626 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | cpp +25 | 11.5.0-5.0.1.el9_5 | ELSA-2025-1346 |
| Oracle Linux 9 | doxygen +2 | 1:1.9.1-12.el9_5 | ELSA-2025-1329 |
| Oracle Linux 9 | gcc-toolset-14-gcc +16 | 14.2.1-1.3.el9_5 | ELSA-2025-1300 |
| Oracle Linux 9 | libasan8 +18 | 13.3.1-2.2.0.1.el9_5 | ELSA-2025-1309, ELSA-2025-1300 |
| Oracle Linux 9 | tbb +3 | 2020.3-8.el9_5.1 | ELSA-2025-1210 |
| Oracle Linux 8 | apache-commons-collections | 3.2.2-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-lang | 2.6-21.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | apache-commons-net | 3.6-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | bea-stax-api | 1.2.0-16.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+20088+3d202164 | ELSA-2021-1846 |
| Oracle Linux 8 | cpp +27 | 8.5.0-23.0.1.el8_10 | ELSA-2025-1301 |
| Oracle Linux 8 | custodia +1 | 0.6.0-3.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | gcc-toolset-14-gcc +16 | 14.2.1-7.1.el8_10 | ELSA-2025-1338 |
| Oracle Linux 8 | glassfish-fastinfoset | 1.2.13-9.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-api | 2.2.12-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | glassfish-jaxb-core +2 | 2.2.11-11.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | ipa-client +8 | 4.9.2-3.0.1.module+el8.4.0+20162+a92f1bfa | ELSA-2021-1846 |
| Oracle Linux 8 | ipa-healthcheck | 0.7-3.module+el8.4.0+20088+3d202164 | ELSA-2021-1846 |
| Oracle Linux 8 | ipa-healthcheck-core | 0.7-3.module+el8.4.0+20089+f3f9be88 | ELSA-2021-1846 |
| Oracle Linux 8 | ipa-server +5 | 4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37 | ELSA-2021-1846 |
| Oracle Linux 8 | jackson-core +2 | 2.10.0-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-jaxrs-providers +1 | 2.9.9-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jackson-module-jaxb-annotations | 2.7.6-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jakarta-commons-httpclient | 1:3.1-28.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | javassist +1 | 3.18.1-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | jss +1 | 4.7.3-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | ldapjdk +1 | 4.22.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | libasan8 +18 | 13.3.1-2.2.0.1.el8_10 | ELSA-2025-1338, ELSA-2025-1306 |
| Oracle Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+20088+3d202164 | ELSA-2021-1846 |
| Oracle Linux 8 | pcs +1 | 0.10.10-4.0.1.el8 | ELSA-2021-9552 |
| Oracle Linux 8 | pki-ca +7 | 10.9.4-1.0.1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | pki-servlet-engine +1 | 1:9.0.30-1.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | python3-jwcrypto | 0.5.0-1.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | python3-kdcproxy | 0.4-5.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | python3-nss +1 | 1.0.1-10.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | python3-pyusb | 1.0.0-9.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | python3-qrcode +1 | 5.1-12.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | python3-yubico | 1.3.2-9.module+el8.3.0+7868+2151076c | ELSA-2021-1846 |
| Oracle Linux 8 | relaxngDatatype | 2011.1-7.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | resteasy | 3.0.26-3.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | slapi-nis | 0.56.6-2.module+el8.4.0+20174+ae9fc984 | ELSA-2021-1846 |
| Oracle Linux 8 | slf4j +1 | 1.7.25-4.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+20161+5ecb5b37 | ELSA-2021-1846 |
| Oracle Linux 8 | stax-ex | 1.7.7-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | tbb +3 | 2018.2-10.el8_10.1 | ELSA-2025-1215 |
| Oracle Linux 8 | tomcatjss | 7.5.0-1.module+el8.3.0+7857+983338ee | ELSA-2020-4847 |
| Oracle Linux 8 | velocity | 1.7-24.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xalan-j2 | 2.7.1-38.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xerces-j2 | 2.11.0-34.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-apis | 1.4.01-25.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xml-commons-resolver | 1.2-26.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xmlstreambuffer | 1.5.4-8.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 8 | xsom | 0-19.20110809svn.module+el8.3.0+7697+44932688 | ELSA-2020-4847 |
| Oracle Linux 7 | bootstrap | 3.0.0-7.0.1.el7 | ELSA-2021-9400 |
| Oracle Linux 7 | cpp +38 | 4.8.5-45.0.1.el7_9 | ELSA-2025-1601 |
| Oracle Linux 7 | doxygen +2 | 1:1.8.5-4.0.1.el7 | ELSA-2025-1255 |
| Oracle Linux 7 | ipa-client +10 | 4.6.8-5.0.1.el7_9.4 | ELSA-2021-0860 |
| Oracle Linux 7 | jquery-ui | 1.10.4.custom-4.0.1.el7 | ELSA-2022-9177 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- jQuery 1.0.3 - Cross-Site Scripting (XSS) EDB-49767 · webapps · Apr 14, 2021
GitHub 6 repositories
-
Cybernegro/CVE-2020-11023 ★ 5 · Jan 3, 2024
CVE-2020-11023 PoC for bug bounty.
-
honeyb33z/cve-2020-11023-scanner ★ 4 · Jan 30, 2025
-
GarlicB/jquery35-local-agent ★ 1 · Jul 5, 2026
Offline jQuery CVE-2020-11023 remediation kit for legacy Spring/JSP - Node.js built-ins only (no npm, no internet)
-
Snorlyd/https-nj.gov---CVE-2020-11023 ★ 1 · May 23, 2022
Vulnearability Report of the New Jersey official site
-
asoka666/Cve-2020-11023 ★ 0 · Jul 14, 2026
-
andreassundstrom/cve-2020-11023-demonstration ★ 0 · Apr 13, 2024
Demonstration of CVE-2020-11023
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.webjars.npm:jquery | >= 1.0.3, < 3.5.0 | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| npm | jquery | >= 1.0.3, < 3.5.0 | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| NuGet | jQuery | >= 1.0.3, < 3.5.0 | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| Packagist | components/jquery | >= 1.0.3, < 3.5.0 | 3.5.0 | GHSA-jpcq-cgw6-v4j6 |
| RubyGems | jquery-rails | < 4.4.0 | 4.4.0 | GHSA-jpcq-cgw6-v4j6 |
Advisories 50
- ALSA-2025:1346 Moderate: gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1300 Moderate: gcc-toolset-14-gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1309 Moderate: gcc-toolset-13-gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1329 Moderate: doxygen security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1210 Moderate: tbb security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1215 Moderate: tbb security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1301 Moderate: gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1306 Moderate: gcc-toolset-13-gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1314 Moderate: doxygen security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:1338 Moderate: gcc-toolset-14-gcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2021:1846 Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2021:4142 Low: pcs security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2020:3369 Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update Red Hat Security Advisories (RHSA) · Oct 19, 2026
- WID-SEC-2026-4026 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2021:4142 Red Hat Security Advisory: pcs security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2020:4211 Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0554 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0552 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0553 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2022:6393 Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:3807 Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2020:3247 Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2023-0239 Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2026
- RHSA-2025:2426 Red Hat Security Advisory: pki-core security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1601 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1515 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1580 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1346 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1514 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1342 Red Hat Security Advisory: gcc-toolset-13-gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1338 Red Hat Security Advisory: gcc-toolset-14-gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1315 Red Hat Security Advisory: doxygen security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1329 Red Hat Security Advisory: doxygen security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1314 Red Hat Security Advisory: doxygen security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1312 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1310 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1311 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1308 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1309 Red Hat Security Advisory: gcc-toolset-13-gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1305 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1306 Red Hat Security Advisory: gcc-toolset-13-gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1304 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1303 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1300 Red Hat Security Advisory: gcc-toolset-14-gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1301 Red Hat Security Advisory: gcc security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1255 Red Hat Security Advisory: doxygen security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2025:1256 Red Hat Security Advisory: doxygen security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
References
- DSA-4693 vendor-advisory
- FEDORA-2020-36d2db5f51 vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://jquery.com/upgrade-guide/3.5/
- https://security.netapp.com/advisory/ntap-20200511-0006/
- https://www.drupal.org/sa-core-2020-002
- https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6
- https://blog.jquery.com/2020/04/10/jquery-3-5-0-released
- openSUSE-SU-2020:1060 vendor-advisory
- GLSA-202007-03 vendor-advisory
- openSUSE-SU-2020:1106 vendor-advisory
- [hive-issues] 20200813 [jira] [Assigned] (HIVE-24039) update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-dev] 20200813 [jira] [Created] (HIVE-24039) update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200813 [jira] [Updated] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200813 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Work started] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Commented] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Assigned] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200902 [jira] [Comment Edited] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200904 [jira] [Assigned] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200911 [GitHub] [hive] rajkrrsingh closed pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200911 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200912 [GitHub] [hive] rajkrrsingh closed pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200912 [GitHub] [hive] rajkrrsingh opened a new pull request #1403: Hive 24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- FEDORA-2020-fbb94073a1 vendor-advisory
- FEDORA-2020-0b32a59b54 vendor-advisory
- [hive-issues] 20200915 [jira] [Resolved] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-commits] 20200915 [hive] branch master updated: HIVE-24039 : Update jquery version to mitigate CVE-2020-11023 (#1403) mailing-list
- [hive-issues] 20200915 [jira] [Work logged] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-gitbox] 20200915 [GitHub] [hive] kgyrtkirk merged pull request #1403: HIVE-24039 : Update jquery version to mitigate CVE-2020-11023 mailing-list
- [hive-issues] 20200915 [jira] [Updated] (HIVE-24039) Update jquery version to mitigate CVE-2020-11023 mailing-list
- FEDORA-2020-fe94df8c34 vendor-advisory
- [nifi-commits] 20200930 svn commit: r1882168 - /nifi/site/trunk/security.html mailing-list
- https://www.oracle.com/security-alerts/cpuoct2020.html
- [flink-issues] 20201105 [jira] [Created] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-dev] 20201105 [jira] [Created] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- openSUSE-SU-2020:1888 vendor-advisory
- [flink-issues] 20201129 [jira] [Commented] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [felix-dev] 20201208 [jira] [Created] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [jira] [Updated] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [GitHub] [felix-dev] cziegeler merged pull request #64: FELIX-6366 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [GitHub] [felix-dev] abhishekgarg18 opened a new pull request #64: FELIX-6366 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [jira] [Commented] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-dev] 20201208 [jira] [Assigned] (FELIX-6366) 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 mailing-list
- [felix-commits] 20201208 [felix-dev] branch master updated: FELIX-6366 1.0.3 < jQuery <3.4.0 is vulnerable to CVE-2020-11023 (#64) mailing-list
- [felix-dev] 20201208 [jira] [Updated] (FELIX-6366) 1.0.3 < jQuery <3.5.0 is vulnerable to CVE-2020-11023 mailing-list
- https://www.oracle.com/security-alerts/cpujan2021.html
- [flink-issues] 20210209 [jira] [Commented] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-issues] 20210209 [jira] [Comment Edited] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [debian-lts-announce] 20210326 [SECURITY] [DLA 2608-1] jquery security update mailing-list
- [flink-issues] 20210422 [jira] [Updated] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-issues] 20210422 [jira] [Commented] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-issues] 20210429 [jira] [Commented] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- [flink-issues] 20210429 [jira] [Updated] (FLINK-20014) Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler mailing-list
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.tenable.com/security/tns-2021-10
- https://www.tenable.com/security/tns-2021-02
- http://packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.html
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html