jquery vulnerabilities

JavaScript library for DOM operations

Registry
npm
Latest
4.0.0
License
MIT
Source
github.com/jquery/jquery (opens the source repository in a new tab)

8 known advisories

The latest version, 4.0.0, is not affected by any of them. Projects on older versions may be.

Update to the latest version:npm install jquery@4.0.0

Security advisories for jquery

  • MediumGHSA-579v-mp3v-rrw514 May 2022

    jQuery vulnerable to Cross-Site Scripting (XSS)

    Affected
    <1.6.3
    Fixed in
    1.6.3
  • MediumGHSA-2pqj-h3vj-pqgw1 Sept 2020

    Cross-Site Scripting in jquery

    Affected
    <1.9.0
    Fixed in
    1.9.0
  • MediumGHSA-q4m3-2j7h-f7xw20 May 2020

    Cross-Site Scripting in jquery

    Affected
    >=1.2.1 <1.9.0
    Fixed in
    1.9.0
  • MediumGHSA-jpcq-cgw6-v4j629 Apr 2020

    Potential XSS vulnerability in jQuery

    Affected
    >=1.0.3 <3.5.0
    Fixed in
    3.5.0
  • MediumGHSA-gxr4-xjj5-5px229 Apr 2020

    Potential XSS vulnerability in jQuery

    Affected
    >=1.12.0 <3.5.0
    Fixed in
    3.5.0
  • MediumGHSA-6c3j-c64m-qhgq26 Apr 2019

    XSS in jQuery as used in Drupal, Backdrop CMS, and other products

    Affected
    >=1.1.4 <3.4.0
    Fixed in
    3.4.0
  • HighGHSA-mhpp-875w-9cpv22 Jan 2018

    Denial of Service in jquery

    Affected
    >=3.0.0-rc.1 <3.0.0
    Fixed in
    3.0.0
  • MediumGHSA-rmxg-73gg-4p9822 Jan 2018

    Cross-Site Scripting (XSS) in jquery

    Affected
    <1.12.2 · >=1.12.3 <3.0.0
    Fixed in
    1.12.2, 3.0.0

Which of your client projects still run an old jquery?

NPMscan reads the package-lock.json, yarn.lock and pnpm-lock.yaml in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.

Scan a project free, no signupOr connect GitHub to scan every repo

Other npm packages

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the npm registry.