Skip to main content
Components
Vulnerabilities
Pricing
MCP
API
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
org.jszip.redist/jquery 1.8.0 | Vulnerabil… | Sonatype Guide
Get full component data and automated fixes with Sonatype Guide.
Sign up for free
maven
org.jszip.redist
jquery
1.8.0
jquery 1.8.0
org.jszip.redist
Published
Dec 3, 2012
•
Policy
compliance
maven Registry
Developer Trust Score
Recommended Version:
x.y.z
Recommended upgrade that meets your policy.
Compare Versions
Overview
Overview
Versions
15
Versions
15
Vulnerabilities
6
Vulnerabilities
6
Dependencies
0
Dependencies
0
Severity
Critical
(0)
High
(0)
Medium
(6)
Low
(0)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
6.1
CVE-2019-11358
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
affected
Severity
Medium
Published
Jul 29, 2022
6.1
CVE-2020-7656
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
affected
Severity
Medium
6.1
CVE-2020-11023
EXPLOITED
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
affected
Severity
Medium
6.1
sonatype-2020-0187
jQuery - Cross-Site Scripting (XSS)
affected
Severity
Medium
Published
Apr 14, 2020
6.5
sonatype-2014-0026
jQuery - Cross-Site Scripting (XSS)
affected
Severity
Medium
Published
Mar 28, 2017
6.1
sonatype-2012-0009
JQuery - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected
Severity
Medium
Published
Published
May 21, 2020
Published
Apr 30, 2020
Mar 28, 2017
