{"action":"Upgrade jquery to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"1.2.1"}],"component":"jquery","cve_ids":["CVE-2020-7656"],"ecosystem":"npm","epss":0.06428,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-q4m3-2j7h-f7xw","id":"tcs_01M5KEMT6Q13GWVME2GADR3H51","modified_at":"2026-07-08T06:49:51.784220278Z","published_at":"2020-05-20T16:18:01Z","references":["https://osv.dev/vulnerability/GHSA-q4m3-2j7h-f7xw","https://nvd.nist.gov/vuln/detail/CVE-2020-7656","https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d","https://github.com/jquery/jquery/commit/606b863edaff29035960e4d813b45d63b8d92876","https://github.com/jquery/jquery","https://github.com/jquery/jquery/blob/9e6393b0bcb52b15313f88141d0bd7dd54227426/src/ajax.js#L203","https://github.com/rails/jquery-rails/blob/master/CHANGELOG.md#220-19-january-2013","https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L7481","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-7656.yml","https://security.netapp.com/advisory/ntap-20200528-0001","https://snyk.io/vuln/SNYK-JS-JQUERY-569619","https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-q4m3-2j7h-f7xw","url":"https://osv.dev/vulnerability/GHSA-q4m3-2j7h-f7xw"}],"summary":"Cross-Site Scripting in jquery"}