diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-26 19:41:50 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-26 19:41:50 +0200 |
| commit | 04b768381180cd712bf7012cbdec962151eb6931 (patch) | |
| tree | 69acbae091aa95257bfc3041605c67e9585e2e9d /data/CVE | |
| parent | 178917121e761740d93871caacc699a76cd45d3b (diff) | |
Mark jquery as removed, got replaced with src:node-jquery
Diffstat (limited to 'data/CVE')
| -rw-r--r-- | data/CVE/2007.list | 2 | ||||
| -rw-r--r-- | data/CVE/2020.list | 4 |
2 files changed, 3 insertions, 3 deletions
diff --git a/data/CVE/2007.list b/data/CVE/2007.list index f92b03d414..be8232b6c5 100644 --- a/data/CVE/2007.list +++ b/data/CVE/2007.list @@ -10489,7 +10489,7 @@ CVE-2007-2381 (The MochiKit framework exchanges data using JavaScript Object Not CVE-2007-2380 (The Microsoft Atlas framework exchanges data using JavaScript Object N ...) NOT-FOR-US: Microsoft Atlas CVE-2007-2379 (The jQuery framework exchanges data using JavaScript Object Notation ( ...) - - jquery <unfixed> (unimportant) + - jquery <removed> (unimportant) NOTE: the paper in this reference is a guideline on how to avoid writing unsafe jquery applications. there really isn't anything to fix in the library itself. NOTE: https://www.fortify.com/vulncat/en/vulncat/javascript/javascript_hijacking_ad_hoc_ajax.html CVE-2007-2378 (The Google Web Toolkit (GWT) framework exchanges data using JavaScript ...) diff --git a/data/CVE/2020.list b/data/CVE/2020.list index 010ee28199..02cd096cfa 100644 --- a/data/CVE/2020.list +++ b/data/CVE/2020.list @@ -5610,12 +5610,12 @@ CVE-2020-11025 (In affected versions of WordPress, a cross-site scripting (XSS) CVE-2020-11024 (In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable ...) NOT-FOR-US: Moonlight iOS/tvOS CVE-2020-11023 (In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, pa ...) - - jquery <unfixed> + - jquery <removed> [jessie] - jquery <not-affected> (Vulnerable code note present) - node-jquery 3.5.0+dfsg-2 NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6 CVE-2020-11022 (In jQuery versions greater than or equal to 1.2 and before 3.5.0, pass ...) - - jquery <unfixed> + - jquery <removed> [jessie] - jquery <not-affected> (Vulnerable code note present) - node-jquery 3.5.0+dfsg-2 NOTE: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2 |