Skip to content

Commit 0010a90

Browse files
authoredMay 1, 2019
+3 vulnerable libraries
1 parent 0e8a75b commit 0010a90

File tree

1 file changed

+30
-0
lines changed

1 file changed

+30
-0
lines changed
 

‎db/definitions.json

+30
Original file line numberDiff line numberDiff line change
@@ -96,6 +96,15 @@
9696
},
9797
"severity": "medium",
9898
"info" : [ "https://bugs.jquery.com/ticket/11974", "https://nvd.nist.gov/vuln/detail/CVE-2015-9251", "http://research.insecurelabs.org/jquery/test/" ]
99+
},
100+
{
101+
"below" : "3.4.0",
102+
"identifiers": {
103+
"CVE" : [ "CVE-2019-11358" ],
104+
"summary": "jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution"
105+
},
106+
"severity" : "low",
107+
"info" : [ "https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/", "https://nvd.nist.gov/vuln/detail/CVE-2019-11358", "https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b" ]
99108
}
100109

101110

@@ -1321,6 +1330,27 @@
13211330
"summary": "cross-site scripting vulnerability"
13221331
},
13231332
"info" : [ "https://github.com/twbs/bootstrap/pull/3421" ]
1333+
},
1334+
{
1335+
"below" : "4.3.1",
1336+
"atOrAbove" : "4.0.0",
1337+
"identifiers": {
1338+
"issue" : "28236",
1339+
"summary": "XSS in data-template, data-content and data-title properties of tooltip/popover",
1340+
"CVE" : ["CVE-2019-8331"]
1341+
},
1342+
"severity" : "high",
1343+
"info" : [ "https://github.com/twbs/bootstrap/issues/28236" ]
1344+
},
1345+
{
1346+
"below" : "3.4.1",
1347+
"identifiers": {
1348+
"issue" : "28236",
1349+
"summary": "XSS in data-template, data-content and data-title properties of tooltip/popover",
1350+
"CVE" : ["CVE-2019-8331"]
1351+
},
1352+
"severity" : "high",
1353+
"info" : [ "https://github.com/twbs/bootstrap/issues/28236" ]
13241354
}
13251355
],
13261356
"extractors" : {

0 commit comments

Comments
 (0)