RubyGems · Maven · npm · NuGet
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
- Severity
- Medium 6.5
- Published
- 26 Oct 2021
- Last changed
- 8 Jul 2026
- Added to UpHeron
- 14 Oct 2026
- Fixed in
- 1.13.0, 7.0.0
- Also known as
- BIT-drupal-2021-41182, GHSA-9gj3-hwp5-pmwc
- Sources
- OSV.dev and GitHub
Affected software
| Software | Affected versions |
|---|---|
org.webjars.npm:jquery-uiMaven · osv:Maven:org.webjars.npm:jquery-ui |
|
jQuery.UI.CombinedNuGet · osv:NuGet:jQuery.UI.Combined |
|
jquery-ui-railsRubyGems · osv:RubyGems:jquery-ui-rails |
|
jQuery UInpm · osv:npm:jquery-ui |
|
References
- CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41182
- GitHub Advisory Database https://github.com/advisories/GHSA-9gj3-hwp5-pmwc