Every CVE Search/ Get API key

CVE-2019-11358

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

6.1 MediumPublic exploitFix available

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

86.8%Up 47.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
CVE-2019-11358
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-1321
Updated
2026-11-02
CVE List No score

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
CVE-2019-11358
Updated
2026-11-02
EUVDEUVD-2019-0403 No score

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
EUVD-2019-0403
Updated
2026-11-03
GitHub AdvisoriesGHSA-6c3j-c64m-qhgq 6.1

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Record
GHSA-6c3j-c64m-qhgq
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79, CWE-1321
Updated
2026-11-02
OSVALPINE-CVE-2019-11358 6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
ALPINE-CVE-2019-11358
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-03
OSVAZL-38200 6.1

CVE-2019-11358 affecting package orangefs for versions less than 2.9.7-7

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
AZL-38200
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 44 moreShow less
OSVAZL-40759 6.1

CVE-2019-11358 affecting package python-pygments for versions less than 2.7.4-1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
AZL-40759
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-41809 6.1

CVE-2019-11358 affecting package m2crypto for versions less than 0.38.0-4

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
AZL-41809
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVAZL-44586 6.1

CVE-2019-11358 affecting package python-openstackdocstheme 3.0.0-9

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
AZL-44586
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSV 6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
CVE-2019-11358
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-11358 6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
DEBIAN-CVE-2019-11358
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVGHSA-6c3j-c64m-qhgq 6.1

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Record
GHSA-6c3j-c64m-qhgq
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-1321, CWE-79
Updated
2026-11-02
OSVPYSEC-2026-628 6.1

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

jQuery from 1.1.4 until 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Record
PYSEC-2026-628
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHBA-2019:1570 6.1

Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3.4

Record
RHBA-2019:1570
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHBA-2020:0402 8.6

Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix update

Record
RHBA-2020:0402
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2019:2587 6.5

Red Hat Security Advisory: CloudForms 4.7.9 security, bug fix and enhancement update

Record
RHSA-2019:2587
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2019:3023 6.1

Red Hat Security Advisory: ovirt-engine-ui-extensions security and bug fix update

Record
RHSA-2019:3023
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2019:3024 9.1

Red Hat Security Advisory: ovirt-web-ui security and bug fix update

Record
RHSA-2019:3024
CVSS 3.0
9.1 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1325 5.6

Red Hat Security Advisory: python-XStatic-jQuery security update

Record
RHSA-2020:1325
CVSS 3.0
5.6 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:3936 6.1

Red Hat Security Advisory: ipa security, bug fix, and enhancement update

Record
RHSA-2020:3936
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2020:4670 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Record
RHSA-2020:4670
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2020:4847 8.6

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

Record
RHSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:5581 5.6

Red Hat Security Advisory: python-XStatic-jQuery security update

Record
RHSA-2020:5581
CVSS 3.0
5.6 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2021:4142 6.1

Red Hat Security Advisory: pcs security, bug fix, and enhancement update

Record
RHSA-2021:4142
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2022:7343 10.0

Red Hat Security Advisory: pcs security update

Record
RHSA-2022:7343
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0552 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0552
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0553 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0553
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0554 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2020:4670 6.1

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

  • js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  • bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4670
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVRLSA-2020:4847 8.6

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

  • pki: Dogtag's python client does not validate certificates (CVE-2020-15720)

  • pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page (CVE-2019-10146)

  • pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab (CVE-2019-10179)

  • pki-core: Reflected XSS in getcookies?url= endpoint in CA (CVE-2019-10221)

  • pki-core: KRA vulnerable to reflected XSS via the getPk12 page (CVE-2020-1721)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRLSA-2021:4142 6.1

Low: pcs security, bug fix, and enhancement update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

The following packages have been upgraded to a later upstream version: pcs (0.10.10). (BZ#1935594)

Security Fix(es):

  • jquery: Cross-site scripting (XSS) via <script> HTML tags containing whitespaces (CVE-2020-7656)

  • jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Record
RLSA-2021:4142
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2019-11358 6.1

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

Record
UBUNTU-CVE-2019-11358
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVALSA-2020:4670 No score

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

  • js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)

  • bootstrap: XSS in the affix configuration target property (CVE-2018-20677)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4670
Updated
2026-11-02
OSVCLSA-2026-1773188121 No score

TuxCare security update for jquery (5 CVEs)

TuxCare rebuilt jquery to address 5 CVEs. Fixed in 1.8.2-tuxcare.1.

Record
CLSA-2026-1773188121
Updated
2026-11-02
OSVCLSA-2026-1773188123 No score

TuxCare security update for jquery (3 CVEs)

TuxCare rebuilt jquery to address 3 CVEs. Fixed in 1.12.4-tuxcare.1.

Record
CLSA-2026-1773188123
Updated
2026-11-02
OSVCLSA-2026-1773188124 No score

TuxCare security update for jquery (3 CVEs)

TuxCare rebuilt jquery to address 3 CVEs. Fixed in 2.2.4-tuxcare.1.

Record
CLSA-2026-1773188124
Updated
2026-11-02
OSVCLSA-2026-1780361405 No score

TuxCare security update for jquery (4 CVEs)

TuxCare rebuilt jquery to address 4 CVEs. Fixed in 1.11.3-tuxcare.1.

Record
CLSA-2026-1780361405
Updated
2026-11-02
OSVCLSA-2026-1784164088 No score

TuxCare security update for jquery (2 CVEs)

TuxCare rebuilt jquery to address 2 CVEs. Fixed in 3.2.1-tuxcare.1.

Record
CLSA-2026-1784164088
Updated
2026-11-02
OSVCLSA-2026-1784164090 No score

TuxCare security update for jquery (2 CVEs)

TuxCare rebuilt jquery to address 2 CVEs. Fixed in 3.3.1-tuxcare.1.

Record
CLSA-2026-1784164090
Updated
2026-11-02
OSVCLSA-2026-1787557579 No score

TuxCare security update for jquery (6 CVEs)

TuxCare rebuilt jquery to address 6 CVEs. Fixed in 1.8.3-tuxcare.1.

Record
CLSA-2026-1787557579
Updated
2026-11-02
OSVCLSA-2026-1787560993 No score

TuxCare security update for jquery (4 CVEs)

TuxCare rebuilt jquery to address 4 CVEs. Fixed in 2.1.3-tuxcare.1.

Record
CLSA-2026-1787560993
Updated
2026-11-02
OSVCLSA-2026-1787916782 No score

TuxCare security update for jquery (7 CVEs)

TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.1-tuxcare.1.

Record
CLSA-2026-1787916782
Updated
2026-11-02
OSVCLSA-2026-1787920143 No score

TuxCare security update for jquery (8 CVEs)

TuxCare rebuilt jquery to address 8 CVEs. Fixed in 1.4.2-tuxcare.1.

Record
CLSA-2026-1787920143
Updated
2026-11-02
OSVCLSA-2026-1787920316 No score

TuxCare security update for jquery (7 CVEs)

TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.3-tuxcare.1.

Record
CLSA-2026-1787920316
Updated
2026-11-02
OSVCLSA-2026-1788956475 No score

TuxCare security update for jquery (6 CVEs)

TuxCare rebuilt jquery to address 6 CVEs. Fixed in 1.3.2-tuxcare.1.

Record
CLSA-2026-1788956475
Updated
2026-11-02
OSVCLSA-2026-1792431819 No score

TuxCare security update for jquery (4 CVEs)

TuxCare rebuilt jquery to address 4 CVEs. Fixed in 1.11.1-tuxcare.1.

Record
CLSA-2026-1792431819
Updated
2026-11-02
OSVDRUPAL-CORE-2019-006 No score

The jQuery project released version 3.4.0, and as part of that, disclosed a security vulnerability that affects all prior versions. As described in their release notes:

jQuery 3.4.0 includes a fix for some unintended behavior when using jQuery.extend(true, {}, ...). If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. This fix is included in jQuery 3.4.0, but patch diffs exist to patch previous jQuery versions.

It's possible that this vulnerability is exploitable with some Drupal modules. As a precaution, this Drupal security release backports the fix to jQuery.extend(), without making any other changes to the jQuery version that is included in Drupal core (3.2.1 for Drupal 8 and 1.4.4 for Drupal 7) or running on the site via some other module such as jQuery Update.

2019-04-22, edited to add CVE.

Record
DRUPAL-CORE-2019-006
Updated
2026-11-02

Affected products

Show 93 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
jquery-rails
RubyGems
 before 4.3.4
4.3.4
django
PyPI
 2.0a1 up to 2.1.9
2.1.9
django
PyPI
 2.2a1 up to 2.2.2
2.2.2
jquery
npm
 1.1.4 up to 3.4.0
3.4.0
jQuery
NuGet
 1.1.4 up to 3.4.0
3.4.0
org.webjars.npm:jquery
Maven
 1.1.4 up to 3.4.0
3.4.0
maximebf/debugbar
Packagist
 before 1.19.0
1.19.0
drupal7
Alpine:v3.9
 before 7.67-r0
7.67-r0
rabbitmq-server
Alpine:v3.20
 before 3.7.17-r0
3.7.17-r0
rabbitmq-server
Alpine:v3.21
 before 3.7.17-r0
3.7.17-r0
Show 290 moreShow less
Affected packages
PackageAffectedFixed
rabbitmq-server
Alpine:v3.22
 before 3.7.17-r0
3.7.17-r0
rabbitmq-server
Alpine:v3.23
 before 3.7.17-r0
3.7.17-r0
rabbitmq-server
Alpine:v3.24
 before 3.7.17-r0
3.7.17-r0
custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-custodia
AlmaLinux:8
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.5.0+2641+983b221b
0.5.0-1.module_el8.5.0+2641+983b221b
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2881+2f24dc92
0.5.0-1.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
 before 0.5.0-1.module_el8.6.0+2737+7e73ea90
0.5.0-1.module_el8.6.0+2737+7e73ea90
python3-kdcproxy
AlmaLinux:8
 before 0.4-5.module_el8.6.0+2881+2f24dc92
0.4-5.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.5.0+2641+983b221b
1.0.0-9.module_el8.5.0+2641+983b221b
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2881+2f24dc92
1.0.0-9.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
 before 1.0.0-9.module_el8.6.0+2737+7e73ea90
1.0.0-9.module_el8.6.0+2737+7e73ea90
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2641+983b221b
5.1-12.module_el8.5.0+2641+983b221b
python3-qrcode
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode-core
AlmaLinux:8
 before 5.1-12.module_el8.5.0+2641+983b221b
5.1-12.module_el8.5.0+2641+983b221b
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.5.0+2641+983b221b
1.3.2-9.module_el8.5.0+2641+983b221b
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2737+7e73ea90
1.3.2-9.module_el8.6.0+2737+7e73ea90
python3-yubico
AlmaLinux:8
 before 1.3.2-9.module_el8.6.0+2881+2f24dc92
1.3.2-9.module_el8.6.0+2881+2f24dc92
orangefs
Azure Linux:3
 before 2.9.7-7
2.9.7-7
python-pygments
Azure Linux:3
 before 2.7.4-1
2.7.4-1
m2crypto
Azure Linux:3
 before 0.38.0-4
0.38.0-4
python-openstackdocstheme
Azure Linux:3
 through 3.0.0-9 None known
jquery
TuxCare:npm
 1.8.2-tuxcare.0 up to 1.8.2-tuxcare.1, plus listed versions
1.8.2
1.8.2-tuxcare.1
jquery
TuxCare:npm
 1.12.4-tuxcare.0 up to 1.12.4-tuxcare.1, plus listed versions
1.12.4
1.12.4-tuxcare.1
jquery
TuxCare:npm
 2.2.4-tuxcare.0 up to 2.2.4-tuxcare.1, plus listed versions
2.2.4
2.2.4-tuxcare.1
jquery
TuxCare:npm
 1.11.3-tuxcare.0 up to 1.11.3-tuxcare.1, plus listed versions
1.11.3
1.11.3-tuxcare.1
jquery
TuxCare:npm
 3.2.1-tuxcare.0 up to 3.2.1-tuxcare.1, plus listed versions
3.2.1
3.2.1-tuxcare.1
jquery
TuxCare:npm
 3.3.1-tuxcare.0 up to 3.3.1-tuxcare.1, plus listed versions
3.3.1
3.3.1-tuxcare.1
jquery
TuxCare:npm
 1.8.3-tuxcare.0 up to 1.8.3-tuxcare.1, plus listed versions
1.8.3
1.8.3-tuxcare.1
jquery
TuxCare:npm
 2.1.3-tuxcare.0 up to 2.1.3-tuxcare.1, plus listed versions
2.1.3
2.1.3-tuxcare.1
jquery
TuxCare:npm
 1.4.1-tuxcare.0 up to 1.4.1-tuxcare.1, plus listed versions
1.4.1
1.4.1-tuxcare.1
jquery
TuxCare:npm
 1.4.2-tuxcare.0 up to 1.4.2-tuxcare.1, plus listed versions
1.4.2
1.4.2-tuxcare.1
jquery
TuxCare:npm
 1.4.3-tuxcare.0 up to 1.4.3-tuxcare.1, plus listed versions
1.4.3
1.4.3-tuxcare.1
jquery
TuxCare:npm
 1.3.2-tuxcare.0 up to 1.3.2-tuxcare.1, plus listed versions
1.3.2
1.3.2-tuxcare.1
jquery
TuxCare:npm
 1.11.1-tuxcare.0 up to 1.11.1-tuxcare.1, plus listed versions
1.11.1
1.11.1-tuxcare.1
mediawiki
Debian:12
 before 1:1.31.2-1
1:1.31.2-1
mediawiki
Debian:13
 before 1:1.31.2-1
1:1.31.2-1
mediawiki
Debian:14
 before 1:1.31.2-1
1:1.31.2-1
node-jquery
Debian:12
 before 2.2.4+dfsg-4
2.2.4+dfsg-4
node-jquery
Debian:13
 before 2.2.4+dfsg-4
2.2.4+dfsg-4
node-jquery
Debian:14
 before 2.2.4+dfsg-4
2.2.4+dfsg-4
jquery
Debian:8
 before 1.7.2+dfsg-3.2+deb8u6, plus listed versions
1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
drupal7
Debian:8
 before 7.32-1+deb8u17, plus listed versions
7.32-1+deb8u107.32-1+deb8u117.32-1+deb8u127.32-1+deb8u137.32-1+deb8u14
Show 11 moreShow less
7.32-1+deb8u157.32-1+deb8u167.32-1+deb8u37.32-1+deb8u47.32-1+deb8u4~bpo70+17.32-1+deb8u57.32-1+deb8u5~bpo70+17.32-1+deb8u67.32-1+deb8u77.32-1+deb8u87.32-1+deb8u9
7.32-1+deb8u17
otrs2
Debian:8
 before 3.3.18-1+deb8u14, plus listed versions
3.3.10-13.3.11-13.3.18-1+deb8u13.3.18-1+deb8u103.3.18-1+deb8u11
Show 15 moreShow less
3.3.18-1+deb8u123.3.18-1+deb8u133.3.18-1+deb8u23.3.18-1+deb8u33.3.18-1+deb8u43.3.18-1+deb8u53.3.18-1+deb8u63.3.18-1+deb8u73.3.18-1+deb8u83.3.18-1+deb8u93.3.18-1~deb7u13.3.18-1~deb7u23.3.18-1~deb7u33.3.9-33.3.9-3+deb8u1
3.3.18-1+deb8u14
otrs2
Debian:10
 before 6.0.16-2+deb10u1, plus listed versions
2.0.4p01-102.0.4p01-112.0.4p01-122.0.4p01-132.0.4p01-14
Show 45 moreShow less
2.0.4p01-14.12.0.4p01-152.0.4p01-162.0.4p01-172.0.4p01-182.0.4p01-62.0.4p01-72.0.4p01-82.0.4p01-92.0.99beta1-12.0.99beta1-22.1.1-12.1.3-12.1.4-12.1.4-22.1.5-12.1.5-22.1.5-32.1.6-12.1.7-12.1.7-22.2.0~beta2-12.2.0~beta3-12.2.1-12.2.2-12.2.3-12.2.4-12.2.5-12.2.5-22.2.6-12.2.7-12.2.7-22.2.7-2lenny12.2.7-2lenny22.2.7-2lenny32.2.7-32.3.2-12.3.2-22.3.3-12.3.4-12.3.4-22.3.4-32.3.4-42.3.4-52.3.4-6
6.0.16-2+deb10u1
drupal/core
Packagist
 8.0.0 up to 8.5.15, 8.6.0 up to 8.6.15, plus listed versions
8.0.18.0.28.0.38.0.48.0.5
Show 45 moreShow less
8.0.68.1.08.1.0-beta18.1.0-beta28.1.0-rc18.1.18.1.108.1.28.1.38.1.48.1.58.1.68.1.78.1.88.1.98.2.08.2.0-beta18.2.0-beta28.2.0-beta38.2.0-rc18.2.0-rc28.2.18.2.28.2.38.2.48.2.58.2.68.2.78.2.88.3.08.3.0-alpha18.3.0-beta18.3.0-rc18.3.0-rc28.3.18.3.28.3.38.3.48.3.58.3.68.3.78.3.88.3.98.4.08.4.0-alpha1
8.5.158.6.15
drupal7
Debian:9
 before 7.52-2+deb9u8, plus listed versions
7.52-27.52-2+deb9u17.52-2+deb9u27.52-2+deb9u37.52-2+deb9u47.52-2+deb9u57.52-2+deb9u67.52-2+deb9u7
7.52-2+deb9u8
mediawiki
Debian:9
 before 1:1.27.7-1~deb9u1, plus listed versions
1:1.27.3-11:1.27.4-11:1.27.4-1~bpo8+11:1.27.4-1~deb9u11:1.27.4-21:1.27.4-31:1.27.5-1~deb9u11:1.27.6-1~deb9u1
1:1.27.7-1~deb9u1
jquery-rails
RubyGems
 before 4.3.4, plus listed versions
0.1.10.1.20.1.30.20.2.1
Show 45 moreShow less
0.2.20.2.30.2.40.2.50.2.60.2.71.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.rc2.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.2.02.2.12.2.22.3.03.0.03.0.13.0.23.0.33.0.43.1.0
4.3.4
jQuery
NuGet
 1.1.4 up to 3.4.0, plus listed versions
1.10.01.10.0.11.10.11.10.21.11.0
Show 45 moreShow less
1.11.11.11.21.11.31.12.01.12.11.12.21.12.31.12.41.4.11.4.21.4.31.4.41.5.01.5.11.5.21.6.01.6.11.6.21.6.31.6.41.7.01.7.11.7.1.11.7.21.8.01.8.11.8.21.8.31.9.01.9.12.0.02.0.12.0.1.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.2.02.2.12.2.22.2.32.2.4
3.4.0
django
PyPI
 2.0a1 up to 2.1.9, plus listed versions
2.02.0.12.0.102.0.122.0.13
Show 21 moreShow less
2.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.0b12.0rc12.12.1.12.1.22.1.32.1.42.1.52.1.72.1.82.1a12.1b12.1rc1
2.1.9
django
PyPI
 2.2a1 up to 2.2.2, plus listed versions
2.22.2.12.2b12.2rc1
2.2.2
org.webjars.npm:jquery
Maven
 1.1.4 up to 3.4.0, plus listed versions
1.11.01.11.11.11.31.12.11.12.2
Show 28 moreShow less
1.12.31.12.41.7.21.7.31.8.21.8.31.9.12.1.02.1.12.1.1-rc12.1.1-rc22.1.32.1.42.2.02.2.12.2.22.2.32.2.43.0.03.0.0-alpha13.0.0-beta13.0.0-rc13.1.03.1.13.2.03.2.13.3.03.3.1
3.4.0
maximebf/debugbar
Packagist
 before 1.19.0, plus listed versions
1.01.0.11.0.21.0.31.0.4
Show 45 moreShow less
1.11.10.01.10.11.13.11.21.31.41.51.5.11.61.6.11.71.7.11.81.91.9.11.9.101.9.111.9.121.9.131.9.141.9.151.9.21.9.31.9.41.9.51.9.61.9.71.9.81.9.9v1.10.2v1.10.3v1.10.4v1.10.5v1.11.0v1.11.1v1.12.0v1.13.0v1.14.0v1.14.1v1.15.0v1.15.1v1.16.0v1.16.1v1.16.2
1.19.0
mediawiki
Mageia:6
 before 1.27.7-1.mga6
1.27.7-1.mga6
mediawiki
Mageia:7
 before 1.31.3-1.mga7
1.31.3-1.mga7
django
PyPI
 2.0a1 up to 2.1.9, 2.2a1 up to 2.2.2, plus listed versions
2.02.0.12.0.102.0.122.0.13
Show 25 moreShow less
2.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.0b12.0rc12.12.1.12.1.22.1.32.1.42.1.52.1.72.1.82.1a12.1b12.1rc12.22.2.12.2b12.2rc1
2.1.92.2.2
ovirt-engine-api-explorer
Red Hat:rhev_manager:4.3
 before 0:0.0.5-1.el7ev
0:0.0.5-1.el7ev
atomic-enterprise-service-catalog
Red Hat:openshift:3.11::el7
 before 1:3.11.170-1.git.1.91db82e.el7
1:3.11.170-1.git.1.91db82e.el7
atomic-enterprise-service-catalog-svcat
Red Hat:openshift:3.11::el7
 before 1:3.11.170-1.git.1.91db82e.el7
1:3.11.170-1.git.1.91db82e.el7
atomic-openshift
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-clients
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-cluster-autoscaler
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.0a0df6a.el7
0:3.11.170-1.git.1.0a0df6a.el7
atomic-openshift-descheduler
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.9ad83f2.el7
0:3.11.170-1.git.1.9ad83f2.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-dockerregistry
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.55fab05.el7
0:3.11.170-1.git.1.55fab05.el7
atomic-openshift-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-hyperkube
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-hypershift
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-master
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-metrics-server
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.357f177.el7
0:3.11.170-1.git.1.357f177.el7
atomic-openshift-node
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-node-problem-detector
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.b1f90a6.el7
0:3.11.170-1.git.1.b1f90a6.el7
atomic-openshift-pod
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-sdn-ovs
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-service-idler
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.8328979.el7
0:3.11.170-1.git.1.8328979.el7
atomic-openshift-template-service-broker
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-tests
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.0.00cac56.el7
0:3.11.170-1.git.0.00cac56.el7
atomic-openshift-web-console
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.3d64e8b.el7
0:3.11.170-1.git.1.3d64e8b.el7
cri-o
Red Hat:openshift:3.11::el7
 before 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
cri-o-debuginfo
Red Hat:openshift:3.11::el7
 before 0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
0:1.11.16-0.5.dev.rhaos3.11.git3f89eba.el7
golang-github-openshift-oauth-proxy
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.b49be83.el7
0:3.11.170-1.git.1.b49be83.el7
golang-github-prometheus-alertmanager
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.61d7960.el7
0:3.11.170-1.git.1.61d7960.el7
golang-github-prometheus-node_exporter
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.51473b7.el7
0:3.11.170-1.git.1.51473b7.el7
golang-github-prometheus-prometheus
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.227bc98.el7
0:3.11.170-1.git.1.227bc98.el7
jenkins
Red Hat:openshift:3.11::el7
 before 0:2.204.2.1580891656-1.el7
0:2.204.2.1580891656-1.el7
jenkins-2-plugins
Red Hat:openshift:3.11::el7
 before 0:3.11.1579107288-1.el7
0:3.11.1579107288-1.el7
openshift-ansible
Red Hat:openshift:3.11::el7
 before 0:3.11.170-2.git.5.8802564.el7
0:3.11.170-2.git.5.8802564.el7
openshift-ansible-docs
Red Hat:openshift:3.11::el7
 before 0:3.11.170-2.git.5.8802564.el7
0:3.11.170-2.git.5.8802564.el7
openshift-ansible-playbooks
Red Hat:openshift:3.11::el7
 before 0:3.11.170-2.git.5.8802564.el7
0:3.11.170-2.git.5.8802564.el7
openshift-ansible-roles
Red Hat:openshift:3.11::el7
 before 0:3.11.170-2.git.5.8802564.el7
0:3.11.170-2.git.5.8802564.el7
openshift-ansible-test
Red Hat:openshift:3.11::el7
 before 0:3.11.170-2.git.5.8802564.el7
0:3.11.170-2.git.5.8802564.el7
openshift-enterprise-autoheal
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.dfe6c52.el7
0:3.11.170-1.git.1.dfe6c52.el7
openshift-enterprise-cluster-capacity
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.661684b.el7
0:3.11.170-1.git.1.661684b.el7
openshift-kuryr
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.7265da1.el7
0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-cni
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.7265da1.el7
0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-common
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.7265da1.el7
0:3.11.170-1.git.1.7265da1.el7
openshift-kuryr-controller
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.7265da1.el7
0:3.11.170-1.git.1.7265da1.el7
prometheus
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.227bc98.el7
0:3.11.170-1.git.1.227bc98.el7
prometheus-alertmanager
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.61d7960.el7
0:3.11.170-1.git.1.61d7960.el7
prometheus-node-exporter
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.51473b7.el7
0:3.11.170-1.git.1.51473b7.el7
python2-kuryr-kubernetes
Red Hat:openshift:3.11::el7
 before 0:3.11.170-1.git.1.7265da1.el7
0:3.11.170-1.git.1.7265da1.el7
ansible-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
ansible-tower-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
ansible-tower-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
ansible-tower-ui
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
ansible-tower-venv-ansible
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
ansible-tower-venv-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.5.2-1.el7at
0:3.5.2-1.el7at
cfme
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-amazon-smartstate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-appliance
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-appliance-common
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-appliance-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-appliance-tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-gemset
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
cfme-gemset-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.9.1-1.el7cf
0:5.10.9.1-1.el7cf
ovirt-ansible-hosted-engine-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.23-1.el7ev
0:1.0.23-1.el7ev
ovirt-ansible-roles
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.7-1.el7ev
0:1.1.7-1.el7ev
ovirt-ansible-vm-infra
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.19-1.el7ev
0:1.1.19-1.el7ev
v2v-conversion-host
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.14.2-1.el7ev
0:1.14.2-1.el7ev
v2v-conversion-host-ansible
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.14.2-1.el7ev
0:1.14.2-1.el7ev
v2v-conversion-host-wrapper
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.14.2-1.el7ev
0:1.14.2-1.el7ev
ovirt-engine-ui-extensions
Red Hat:rhev_manager:4.3
 before 0:1.0.10-1.el7ev
0:1.0.10-1.el7ev
ovirt-web-ui
Red Hat:rhev_manager:4.3
 before 0:1.6.0-1.el7ev
0:1.6.0-1.el7ev
python-XStatic-jQuery
Red Hat:openstack:15::el8
 before 0:3.4.1.0-1.el8ost
0:3.4.1.0-1.el8ost
python3-XStatic-jQuery
Red Hat:openstack:15::el8
 before 0:3.4.1.0-1.el8ost
0:3.4.1.0-1.el8ost
ipa
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::client
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::computenode
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::server
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-client-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-python-compat
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-common
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-dns
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
ipa-server-trust-ad
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaclient
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipalib
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
python2-ipaserver
Red Hat:enterprise_linux:7::workstation
 before 0:4.6.8-5.el7
0:4.6.8-5.el7
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:11.3-1.module+el8.3.0+6993+104f8db0
0:11.3-1.module+el8.3.0+6993+104f8db0
custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-epn
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-6.module+el8.3.0+7711+c4441980
0:0.4-6.module+el8.3.0+7711+c4441980
ipa-healthcheck-core
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-6.module+el8.3.0+7711+c4441980
0:0.4-6.module+el8.3.0+7711+c4441980
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-selinux
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8223+6212645f
0:4.8.7-12.module+el8.3.0+8223+6212645f
ipa-server
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a
0:4.8.7-12.module+el8.3.0+8222+c1bff54a
opendnssec
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.6-2.module+el8.3.0+6580+328a3362
0:2.1.6-2.module+el8.3.0+6580+328a3362
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-1.module+el8.1.0+4107+4a66eb87
0:0.5.0-1.module+el8.1.0+4107+4a66eb87
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
custodia
Rocky Linux:8
 before 0:0.6.0-3.module+el8.4.0+429+6bd33fea
0:0.6.0-3.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-1.module+el8.4.0+429+6bd33fea
0:0.5.0-1.module+el8.4.0+429+6bd33fea
python-jwcrypto
Rocky Linux:8
 before 0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
python-kdcproxy
Rocky Linux:8
 before 0:0.4-5.module+el8.3.0+244+0b2ae752
0:0.4-5.module+el8.3.0+244+0b2ae752
python-qrcode
Rocky Linux:8
 before 0:5.1-12.module+el8.4.0+429+6bd33fea
0:5.1-12.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.module+el8.4.0+429+6bd33fea
0:1.3.2-9.module+el8.4.0+429+6bd33fea
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
pyusb
Rocky Linux:8
 before 0:1.0.0-9.module+el8.4.0+429+6bd33fea
0:1.0.0-9.module+el8.4.0+429+6bd33fea
pyusb
Rocky Linux:8
 before 0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.3.0+53+ea062990
0:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.3.0+74+855e3f5d
0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.3.0+53+ea062990
0:2.6-21.module+el8.3.0+53+ea062990
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.3.0+74+855e3f5d
0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.3.0+53+ea062990
0:3.6-3.module+el8.3.0+53+ea062990
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.3.0+74+855e3f5d
0:3.6-3.module+el8.3.0+74+855e3f5d
bea-stax
Rocky Linux:8
 before 0:1.2.0-16.module+el8.3.0+53+ea062990
0:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfoset
Rocky Linux:8
 before 0:1.2.13-9.module+el8.3.0+53+ea062990
0:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxb
Rocky Linux:8
 before 0:2.2.11-11.module+el8.3.0+53+ea062990
0:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-api
Rocky Linux:8
 before 0:2.2.12-8.module+el8.3.0+53+ea062990
0:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotations
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-core
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databind
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providers
Rocky Linux:8
 before 0:2.9.9-1.module+el8.3.0+53+ea062990
0:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotations
Rocky Linux:8
 before 0:2.7.6-4.module+el8.3.0+53+ea062990
0:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.3.0+53+ea062990
1:3.1-28.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.3.0+74+855e3f5d
1:3.1-28.module+el8.3.0+74+855e3f5d
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.3.0+53+ea062990
0:3.18.1-8.module+el8.3.0+53+ea062990
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.3.0+74+855e3f5d
0:3.18.1-8.module+el8.3.0+74+855e3f5d
ldapjdk
Rocky Linux:8
 before 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
pki-servlet-engine
Rocky Linux:8
 before 1:9.0.30-1.module+el8.3.0+53+ea062990
1:9.0.30-1.module+el8.3.0+53+ea062990
python-nss
Rocky Linux:8
 before 0:1.0.1-10.module+el8.3.0+53+ea062990
0:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatype
Rocky Linux:8
 before 0:2011.1-7.module+el8.3.0+53+ea062990
0:2011.1-7.module+el8.3.0+53+ea062990
resteasy
Rocky Linux:8
 before 0:3.0.26-3.module+el8.3.0+53+ea062990
0:3.0.26-3.module+el8.3.0+53+ea062990
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.5.0+697+f586bb30
0:1.7.25-4.module+el8.5.0+697+f586bb30
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.3.0+74+855e3f5d
0:1.7.25-4.module+el8.3.0+74+855e3f5d
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.3.0+133+b8b54b58
0:1.7.25-4.module+el8.3.0+133+b8b54b58
stax-ex
Rocky Linux:8
 before 0:1.7.7-8.module+el8.3.0+53+ea062990
0:1.7.7-8.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.3.0+53+ea062990
0:1.7-24.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.3.0+74+855e3f5d
0:1.7-24.module+el8.3.0+74+855e3f5d
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.3.0+53+ea062990
0:2.7.1-38.module+el8.3.0+53+ea062990
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.3.0+74+855e3f5d
0:2.7.1-38.module+el8.3.0+74+855e3f5d
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.3.0+53+ea062990
0:2.11.0-34.module+el8.3.0+53+ea062990
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.3.0+74+855e3f5d
0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.5.0+697+f586bb30
0:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.3.0+74+855e3f5d
0:1.4.01-25.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.3.0+53+ea062990
0:1.4.01-25.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.3.0+53+ea062990
0:1.2-26.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.3.0+74+855e3f5d
0:1.2-26.module+el8.3.0+74+855e3f5d
xmlstreambuffer
Rocky Linux:8
 before 0:1.5.4-8.module+el8.3.0+53+ea062990
0:1.5.4-8.module+el8.3.0+53+ea062990
xsom
Rocky Linux:8
 before 0:0-19.20110809svn.module+el8.3.0+53+ea062990
0:0-19.20110809svn.module+el8.3.0+53+ea062990
pcs
Rocky Linux:8
 before 0:0.10.10-4.el8
0:0.10.10-4.el8
drupal7
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
7.23-17.24-17.24-27.26-17.26-1ubuntu0.17.26-1ubuntu0.1+esm17.26-1ubuntu0.1+esm27.26-1ubuntu0.1+esm3
 None known
jquery
Ubuntu:Pro:14.04:LTS
 before 1.7.2+dfsg-2ubuntu1+esm1, plus listed versions
1.7.2+dfsg-2ubuntu1
1.7.2+dfsg-2ubuntu1+esm1
jquery
Ubuntu:Pro:16.04:LTS
 before 1.11.3+dfsg-4ubuntu0.1~esm1, plus listed versions
1.7.2+dfsg-3ubuntu21.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1
drupal7
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
7.38-17.41-17.44-1ubuntu1~16.04.07.44-1ubuntu1~16.04.0+esm17.44-1ubuntu1~16.04.0+esm27.44-1ubuntu1~16.04.0+esm3
 None known
node-jquery
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6.3-1
 None known
otrs2
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.0.10-15.0.1-15.0.1-25.0.2-15.0.3-15.0.5-15.0.6-15.0.7-1
 None known
jquery
Ubuntu:Pro:18.04:LTS
 before 3.2.1-1ubuntu0.1~esm1, plus listed versions
3.1.1-23.2.1-1
3.2.1-1ubuntu0.1~esm1
mediawiki
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:1.27.3-11:1.27.4-11:1.27.4-21:1.27.4-3
 None known
node-jquery
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.2.4+dfsg-1
 None known
otrs2
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.23-15.0.24-16.0.1-16.0.2-16.0.3-16.0.4-16.0.5-1
 None known
mediawiki
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:1.31.2-1ubuntu11:1.31.5-11:1.31.5-1ubuntu11:1.31.5-21:1.31.5-3
Show 4 moreShow less
1:1.31.5-3ubuntu11:1.31.6-11:1.31.7-11:1.31.7-1ubuntu0.1~esm1
 None known
otrs2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.32-66.1.2-16.2.1-16.2.2-2
 None known
mediawiki
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1:1.35.3-11:1.35.4-11:1.35.5-11:1.35.5-1ubuntu11:1.35.5-1ubuntu21:1.35.5-1ubuntu31:1.35.6-11:1.35.6-1ubuntu0.1~esm1
 None known
mediawiki
Ubuntu:Pro:24.04:LTS
 All versions, plus listed versions
1:1.39.4-21:1.39.5-11:1.39.6-11:1.39.7-11:1.39.7-1ubuntu0.1~esm1
 None known
mediawiki
Ubuntu:25.10
 All versions, plus listed versions
1:1.43.1+dfsg-11:1.43.1+dfsg-21:1.43.3+dfsg-1
 None known
mediawiki
Ubuntu:26.10
 All versions, plus listed versions
1:1.43.8+dfsg-21:1.43.9+dfsg-11:1.43.9+dfsg-1ubuntu1
 None known
mediawiki
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:1.43.3+dfsg-11:1.43.5+dfsg-11:1.43.6+dfsg-21:1.43.8+dfsg-11:1.43.8+dfsg-2
 None known
python-Django
openSUSE:Leap 15.1
 before 2.2.4-lp151.2.3.1
2.2.4-lp151.2.3.1
python-Django
SUSE:Package Hub 15 SP1
 before 2.2.4-bp151.3.3.1
2.2.4-bp151.3.3.1
python-notebook
SUSE:Package Hub 15 SP6
 before 5.7.11-bp156.4.3.1
5.7.11-bp156.4.3.1
python-notebook
openSUSE:Leap 15.6
 before 5.7.11-bp156.4.3.1
5.7.11-bp156.4.3.1
python-Django
openSUSE:Tumbleweed
 before 3.2.7-2.3
3.2.7-2.3
python-Django
openSUSE:Tumbleweed
 before 4.2.11-2.1
4.2.11-2.1
python-Django4
openSUSE:Tumbleweed
 before 4.2.14-1.1
4.2.14-1.1
python-Django6
openSUSE:Tumbleweed
 before 6.0-1.1
6.0-1.1
python-Django4
openSUSE:Tumbleweed
 before 4.2.30-4.1
4.2.30-4.1
python-Django
openSUSE:Tumbleweed
 before 5.2.16-1.1
5.2.16-1.1
python-Django5
openSUSE:Tumbleweed
 before 5.2.16-1.1
5.2.16-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubDanielRuf/snyk-js-jquery-1740062019-03-30
PoC in GitHubbitnesswise/jquery-prototype-pollution-fix2019-07-18
PoC in GitHubDanielRuf/snyk-js-jquery-5651292020-04-14
PoC in GitHubchrisneagu/FTC-Skystone-Dark-Angels-Romania-20202021-03-08
PoC in GitHubSnorlyd/https-nj.gov---CVE-2019-113582022-05-23
PoC in GitHubisacaya/CVE-2019-113582023-08-05
Exploit-DBjQuery 3.3.1 - Prototype Pollution & XSS Exploit2025-04-08

History

History
RecordedChangedSources
affected, aliases, referencesOSV
exploits
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-11358 is a medium vulnerability (CVSS 6.1) in Backdropcms Backdrop, published April 17, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 86.8%, the 99th percentile. Fixed in jquery-rails 4.3.4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 236 package rows, 250 versions and 596 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 15 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open