npm/jquery-query-object CVE-2021-20083: high 8.8, EPSS 4.19%
jquery-plugin-query-object contains prototype pollution vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-q9xg-h756-8689
- https://nvd.nist.gov/vuln/detail/CVE-2021-20083
- https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-query-object.md
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7CR6VGITIB2TXXZ6B5QRRWPU5S4BXQPD
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJX6NVXSRN3RX3YUVEJQ4WUTQSDL3DSR
- http://packetstormsecurity.com/files/166299/WordPress-Core-5.9.0-5.9.1-Cross-Site-Scripting.html
CVE-2021-20083 · published · modified · JSON