Approved changes feed: RSS · Atom

cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJqueryui (38b8f238-b8d6-5d5b-8150-895a47256e67)
ProductJquery Ui (66d977b4-8532-5f4b-98ce-7538ea5808cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jquery/jquery-ui purl2cpe 2026-06-01 10:15:25.756545
pkg:maven/org.webjars.npm/jquery-ui purl2cpe 2026-06-01 10:15:25.756547
pkg:npm/jquery-ui purl2cpe 2026-06-01 10:15:25.756550
pkg:nuget/jQuery.UI purl2cpe 2026-06-01 10:15:25.756553
pkg:rpm/fedora/js-jquery-ui purl2cpe 2026-06-01 10:15:25.756555

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30875 vulnerable 2026-06-08 06:35:30.705230 Details available
Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, and because the exploitation example does not indicate whether, or how, the example website is using jQuery UI.
Published: 2024-10-17T00:00:00.000Z
Updated: 2024-10-25T15:44:23.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7103 vulnerable 2026-06-08 05:08:11.819718 Details available
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
Published: 2017-03-15T00:00:00.000Z
Updated: 2024-08-06T01:50:47.467Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.