Debian/node-jquery: medium 6.1
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an en
Action: Upgrade node-jquery to 2.2.4+dfsg-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.4+dfsg-4 | - |
Fixed versions
| 2.2.4+dfsg-4 |
Sources
- osv: DEBIAN-CVE-2019-11358#Debian:14/node-jquery
- https://security-tracker.debian.org/tracker/CVE-2019-11358
published · modified · JSON