CVE-2019-5428
Duplicate Advisory: Prototype Pollution in jquery
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
What each source reports
CVE ListNo score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-5428- Updated
- 2026-11-02
EUVDEUVD-2019-0439No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
EUVD-2019-0439- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wv67-q8rr-grjpNo score
Duplicate Advisory: Prototype Pollution in jquery
Duplicate Advisory
This advisory is a duplicate of GHSA-6c3j-c64m-qhgq. This link is maintained to preserve external references.
Original Description
Versions of jquery prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for Object causing changes in properties that will exist on all objects.
Recommendation
Upgrade to version 3.4.0 or later.
- Record
GHSA-wv67-q8rr-grjp- Updated
- 2026-11-02
NVDNo score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
CVE-2019-5428- Updated
- 2026-11-02
OSVGHSA-wv67-q8rr-grjpNo score
Duplicate Advisory: Prototype Pollution in jquery
Duplicate Advisory
This advisory is a duplicate of GHSA-6c3j-c64m-qhgq. This link is maintained to preserve external references.
Original Description
Versions of jquery prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for Object causing changes in properties that will exist on all objects.
Recommendation
Upgrade to version 3.4.0 or later.
- Record
GHSA-wv67-q8rr-grjp- Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-5428No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Record
UBUNTU-CVE-2019-5428- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jqueryUbuntu:Pro:14.04:LTS | All versions, plus listed versions 1.7.2+dfsg-2ubuntu11.7.2+dfsg-2ubuntu1+esm1 | None known |
jqueryUbuntu:Pro:16.04:LTS | All versions, plus listed versions 1.7.2+dfsg-3ubuntu21.11.3+dfsg-41.11.3+dfsg-4ubuntu0.1~esm1 | None known |
jqueryUbuntu:Pro:18.04:LTS | All versions, plus listed versions 3.1.1-23.2.1-13.2.1-1ubuntu0.1~esm1 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5428 has been rejected by its source and should not be treated as a live vulnerability, published April 22, 2019.