AZL-44976 CVE-2022-38900 affecting package js-jquery 3.5.0-4

🗓️ 28 Nov 2022 13:15:10Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Jquery library version 3.5.0-4 and decode component version 0.2.0 are vulnerable to denial of service from improper input validation.

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js decode-uri-component	30 Jan 202317:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to possible denial of service due to decode-uri-component (CVE-2022-38900 )	8 Aug 202414:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: decode-uri-component is vulnerable to CVE-2022-38900 used in IBM Maximo Application Suite	5 Apr 202320:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation v2.4.3 addresses multiple security vulnerabilities	15 May 202313:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in nodejs decode-uri-component affect Cloud Pak System[CVE-2022-38900]	1 Aug 202412:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.3	18 Jun 202414:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-38900]	28 Apr 202311:44	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-38900

21 Apr 2026 04:31Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00429