CVE-2015-9251

The jQuery library, in versions before 3.0.0 , is vulnerable to Cross-site Scripting (XSS) attacks. The flaw occurs when a cross-domain Ajax request is performed without specifying the dataType option, which can cause the browser to execute text/javascript responses. This vulnerability has been i...

CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...