Approved changes feed: RSS · Atom

cpe:2.3:a:jquery:jquery:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorJquery (84095780-12fc-5ad4-bd5f-14e2928e616d)
ProductJquery (0356c2a6-39e7-5da5-9308-86583a91338c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/jquery purl2cpe 2026-06-01 10:14:21.152030
pkg:github/jquery/jquery purl2cpe 2026-06-01 10:14:21.152031
pkg:npm/jquery purl2cpe 2026-06-01 10:14:21.152033
pkg:nuget/jQuery purl2cpe 2026-06-01 10:14:21.152034
pkg:rpm/fedora/js-jquery purl2cpe 2026-06-01 10:14:21.152036

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2379 vulnerable 2026-06-08 04:49:44.757728 Details available
The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
Published: 2007-04-30T23:00:00.000Z
Updated: 2024-08-07T13:33:29.050Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.