You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.
CVE-2019-11358 - Medium Severity Vulnerability
jquery-2.1.4.min.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.min.js
Path to dependency file: /tmp/ws-scm/infinite/node_modules/js-base64/test/index.html
Path to vulnerable library: /infinite/node_modules/js-base64/test/index.html
Dependency Hierarchy:
jquery-1.9.1.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/1.9.1/jquery.js
Path to dependency file: /tmp/ws-scm/infinite/node_modules/tinycolor2/test/index.html
Path to vulnerable library: /infinite/node_modules/tinycolor2/test/../demo/jquery-1.9.1.js,/infinite/node_modules/tinycolor2/demo/jquery-1.9.1.js
Dependency Hierarchy:
Found in HEAD commit: f686a0f9119ce1b31715bd19e5a2f4705af80098
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.
Publish Date: 2019-04-20
URL: CVE-2019-11358
Base Score Metrics:
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358
Release Date: 2019-04-20
Fix Resolution: 3.4.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: