oracle

financial_services_regulatory_reporting_for_de_nederlandsche_bank

2 known vulnerabilities · sorted by CVSS score

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

oracle / healthcare_translational_research+80

Network

Published Apr 29, 2020

CVE-2019-11358

MEDIUM6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

jquery / jquery+217

Network

Published Apr 20, 2019