CVE-2019-5428
Duplicate Advisory: Prototype Pollution in jquery
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-5428- Updated
- 2026-11-02
EUVDEUVD-2019-0439 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2019-0439- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wv67-q8rr-grjp No score
Duplicate Advisory: Prototype Pollution in jquery
Duplicate Advisory
This advisory is a duplicate of GHSA-6c3j-c64m-qhgq. This link is maintained to preserve external references.
Original Description
Versions of jquery prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for Object causing changes in properties that will exist on all objects.
Recommendation
Upgrade to version 3.4.0 or later.
- Record
GHSA-wv67-q8rr-grjp- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-5428- Updated
- 2026-11-02
OSVGHSA-wv67-q8rr-grjp No score
Duplicate Advisory: Prototype Pollution in jquery
Duplicate Advisory
This advisory is a duplicate of GHSA-6c3j-c64m-qhgq. This link is maintained to preserve external references.
Original Description
Versions of jquery prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for Object causing changes in properties that will exist on all objects.
Recommendation
Upgrade to version 3.4.0 or later.
- Record
GHSA-wv67-q8rr-grjp- Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-5428 No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
UBUNTU-CVE-2019-5428- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jqueryUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.7.2+dfsg-2ubuntu11.7.2+dfsg-2ubuntu1+esm1 |
None known |
jqueryUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.7.2+dfsg-3ubuntu21.11.3+dfsg-41.11.3+dfsg-4ubuntu0.1~esm1 |
None known |
jqueryUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.1.1-23.2.1-13.2.1-1ubuntu0.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5428 has been rejected by its source and should not be treated as a live vulnerability, published April 22, 2019.