UpHeron
All vulnerabilities

Packagist · RubyGems · Maven · npm · NuGet

CVE-2020-11022

Potential XSS vulnerability in jQuery

Severity
Medium 6.9
Published
29 Apr 2020
Last changed
10 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.19.0, 3.5.0, 4.0.1, 4.4.0
Also known as
BIT-drupal-2020-11022, GHSA-gxr4-xjj5-5px2
Sources
OSV.dev and GitHub

Affected software

SoftwareAffected versions
org.webjars.npm:jqueryMaven · osv:Maven:org.webjars.npm:jquery
  • From 1.12.0 before 3.5.0
jqueryNuGet · osv:NuGet:jquery
  • From 1.12.0 before 3.5.0
athlon1600/youtube-downloaderPackagist · osv:Packagist:athlon1600/youtube-downloader
  • Every version before 4.0.1
components/jqueryPackagist · osv:Packagist:components/jquery
  • From 1.12.0 before 3.5.0
maximebf/debugbarPackagist · osv:Packagist:maximebf/debugbar
  • Every version before 1.19.0
jquery-railsRubyGems · osv:RubyGems:jquery-rails
  • Every version before 4.4.0
jQuerynpm · osv:npm:jquery
  • From 1.12.0 before 3.5.0

References