Approved changes feed: RSS · Atom

cpe:2.3:a:jquery-minicolors_project:jquery-minicolors:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJquery Minicolors Project (d01757a7-2ac9-583c-9053-a16750d3e1e3)
ProductJquery Minicolors (31194eeb-dcd1-506f-b71b-8f9f6eafd4ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jquery-minicolors purl2cpe 2026-06-01 10:12:42.018003
pkg:deb/ubuntu/jquery-minicolors purl2cpe 2026-06-01 10:12:42.018006
pkg:github/claviska/jquery-minicolors purl2cpe 2026-06-01 10:12:42.018009
pkg:maven/org.webjars.bowergithub.claviska/jquery-minicolors purl2cpe 2026-06-01 10:12:42.018011
pkg:npm/%40claviska/jquery-minicolors purl2cpe 2026-06-01 10:12:42.018014

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32850 vulnerable 2026-06-08 05:32:08.159971 jQuery MiniColors vulnerable to Cross-site Scripting
MEDIUM (6.1)
jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
Published: 2023-02-20T00:00:00.000Z
Updated: 2025-03-10T21:09:21.659Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.