Vulnerabilities
Summary — last 7 days
New vulnerabilities4,643▼ 852 vs. last week
Critical / high1,746▼ 1,375 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)954▲ 855 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Medium (6.1) | 85% | ⚠ Active exploitationExploit | JqueryDebian LinuxFedoraproject FedoraDrupal+48 | 4/29/2020 | 6/17/2026 | In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. |