MAL-2025-23903 Malicious code in jquery.ui.widget.js (npm)

The package jquery.ui.widget.js was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-23902 Malicious code in jquery.ui.mouse.js (npm)

The package jquery.ui.mouse.js was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-23901 Malicious code in jquery-ui.ruler (npm)

The package jquery-ui.ruler was found to contain malicious code...

Malicious code in jquery-impromptu (npm)

The package jquery-impromptu was found to contain malicious code...

Malicious code in jquery-ui-slider-pips (npm)

The package jquery-ui-slider-pips was found to contain malicious code...

Malicious code in jquery-2.1 (npm)

The package jquery-2.1 was found to contain malicious code...

Malicious code in jquery.ui.widget.js (npm)

The package jquery.ui.widget.js was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in jquery-poolparty (npm)

The package jquery-poolparty was found to contain malicious code...

MAL-2025-39904 Malicious code in xo-jquery-mask-plugin (npm)

The package xo-jquery-mask-plugin was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security f59460b8ba9281b320efd1888070928d3c31f86dd0770c7fe38d1f2eecc1e66b This package installs a dependency hosted on a custom domain that...

MAL-2025-23894 Malicious code in jquery-2.1 (npm)

The package jquery-2.1 was found to contain malicious code...

MAL-2025-23896 Malicious code in jquery-double-tap-to-go (npm)

The package jquery-double-tap-to-go was found to contain malicious code...

MAL-2025-23898 Malicious code in jquery-poolparty (npm)

The package jquery-poolparty was found to contain malicious code...

Malicious code in jquery-ui.ruler (npm)

The package jquery-ui.ruler was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2015-7943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module...

Linux Distros Unpatched Vulnerability : CVE-2020-25814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki before 1.31.10 and 1.32.x through 1.34.x before 1.34.4, XSS related to jQuery can occur. The attacker creates a message with javascript:payload xss...

Linux Distros Unpatched Vulnerability : CVE-2017-6929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it...

SUSE CVE-2022-31160

jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents...

Malicious code in jquery-tools (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6288 Malicious code in jquery-tools (npm)

The package communicates with a domain associated with malicious activity...

CVE-2015-10138: Unrestricted Upload of File with Dangerous Type

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to upload arbitrary...