Packagist/drupal/core CVE-2019-11358: unknown, EPSS 86.82%

The jQuery project released version 3.4.0, and as part of that, disclosed a security vulnerability that affects all prior versions. As described in their [release notes](https://blog.jquery.com/2019/0

Action: Upgrade drupal/core to 8.5.15 or later.

composer require drupal/core:8.5.15

composer require drupal/core:8.6.15

Affected

introduced	fixed	last affected
8.0.0	8.5.15	-
8.6.0	8.6.15	-

Fixed versions

8.5.15

8.6.15

Sources

osv: DRUPAL-CORE-2019-006
https://www.drupal.org/sa-core-2019-006

CVE-2019-11358 · published 2019-04-17T20:30:56Z · modified 2026-09-19T19:48:39Z · JSON