Red Hat Security Advisory

RHSA-2020:1325

python-XStatic-jQuery security update

Released 2020-04-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 15.0 python-XStatic-jQuery-3.4.1.0-1.el8ost, python3-XStatic-jQuery-3.4.1.0-1.el8ost

Fixes 1 record

TI-2019-08480 CVE-2019-11358 · GHSA-6c3j-c64m-qhgq

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles…

HIGH 69

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.8682 Published 2019-04-19 Partial fix · 3.4.0, 4.3.4 +3 CWE-1321