Every CVE Search/ Get API key

DRUPAL-CONTRIB-2022-052

No scoreFix available

jQuery UI is a third-party library used by Drupal. The jQuery UI Checkboxradio module provides the jQuery UI Checkboxradio library (which was previously in Drupal 8 core, but has since been removed from core and moved to this module).

As part of the jQuery UI 1.13.2 update, the jQuery UI project disclosed following security issue that may affect sites using the jQuery UI Checkboxradio module:

What each source reports

OSV No score

jQuery UI is a third-party library used by Drupal. The jQuery UI Checkboxradio module provides the jQuery UI Checkboxradio library (which was previously in Drupal 8 core, but has since been removed from core and moved to this module).

As part of the jQuery UI 1.13.2 update, the jQuery UI project disclosed following security issue that may affect sites using the jQuery UI Checkboxradio module:

Record
DRUPAL-CONTRIB-2022-052
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
drupal/jquery_ui_checkboxradio
Packagist:https://packages.drupal.org/8
before 1.4.0
1.4.0

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

DRUPAL-CONTRIB-2022-052 is a vulnerability with no CVSS score yet in drupal/jquery_ui_checkboxradio, published August 10, 2022. No source lists public exploit code. Fixed in drupal/jquery_ui_checkboxradio 1.4.0.

References

MoveEnter Open