{"id":"CVE-2019-5428","aliases":["EUVD-2019-0439","GHSA-wv67-q8rr-grjp","UBUNTU-CVE-2019-5428"],"status":"rejected","title":"Duplicate Advisory: Prototype Pollution in jquery","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-04-22T20:41:25Z","modified":"2026-09-10T03:48:10Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.2+dfsg-2ubuntu1","1.7.2+dfsg-2ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.7.2+dfsg-3ubuntu2","1.11.3+dfsg-4","1.11.3+dfsg-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"jquery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.1-2","3.2.1-1","3.2.1-1ubuntu0.1~esm1"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5428","tags":["advisory"]},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/","tags":["report"]},{"url":"https://github.com/jquery/jquery/pull/4333","tags":["web","report"]},{"url":"https://hackerone.com/reports/454365","tags":["web","report"]},{"url":"https://www.npmjs.com/advisories/796","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wv67-q8rr-grjp"},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-5428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5428","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-5428","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-04-22T20:41:25Z","modified":"2019-04-25T15:10:30Z","updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2019-0439","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-04-22T20:41:25Z","modified":"2019-04-25T15:10:30Z","updated_at":"2026-11-03T03:51:30.035644Z"}],"ghsa":[{"id":"GHSA-wv67-q8rr-grjp","title":"Duplicate Advisory: Prototype Pollution in jquery","description":"## Duplicate Advisory\nThis advisory is a duplicate of [GHSA-6c3j-c64m-qhgq](https://github.com/advisories/GHSA-6c3j-c64m-qhgq). This link is maintained to preserve external references.\n\n## Original Description\nVersions of `jquery`  prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for `Object` causing changes in properties that will exist on all objects.\n\n## Recommendation\nUpgrade to version 3.4.0 or later.","status":"withdrawn","published":"2019-04-23T15:59:10Z","modified":"2023-09-25T23:22:55Z","updated_at":"2026-11-02T14:37:06.234371Z"}],"nvd":[{"id":"CVE-2019-5428","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-04-22T21:29:00.6Z","modified":"2023-11-07T03:11:34.763Z","updated_at":"2026-11-02T14:05:12.471695Z"}],"osv":[{"id":"GHSA-wv67-q8rr-grjp","title":"Duplicate Advisory: Prototype Pollution in jquery","description":"## Duplicate Advisory\nThis advisory is a duplicate of [GHSA-6c3j-c64m-qhgq](https://github.com/advisories/GHSA-6c3j-c64m-qhgq). This link is maintained to preserve external references.\n\n## Original Description\nVersions of `jquery`  prior to 3.4.0 are vulnerable to Prototype Pollution. The extend() method allows an attacker to modify the prototype for `Object` causing changes in properties that will exist on all objects.\n\n## Recommendation\nUpgrade to version 3.4.0 or later.","status":"withdrawn","published":"2019-04-23T15:59:10Z","modified":"2026-09-10T03:48:10.211504561Z","updated_at":"2026-11-02T15:46:59.131095Z"},{"id":"UBUNTU-CVE-2019-5428","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-04-22T21:29:00Z","modified":"2025-09-08T16:45:15Z","updated_at":"2026-11-02T15:54:21.741399Z"}]}}