Date: Fri, 14 Nov 2014 08:29:42 -0700 From: "Vincent Danen" <vdanen@...hat.com> To: "OSS Security List" <oss-security@...ts.openwall.com> Subject: old CVE assignments for JQuery 1.10.0 A title XSS was fixed in JQuery 1.10.0 back in November 2012 (with the release of 1.10.0 in January 2013): http://bugs.jqueryui.com/ticket/6016 https://github.com/jquery/jquery-ui/commit/7e9060c109b928769a664dbcc2c17bd21231b6f3 http://jqueryui.com/changelog/1.10.0/ Looking at the changelog it also seems like there are others: * Fixed: XSS in combobox demo. (#8859, 5fee6fd) * Fixed: Title XSS Vulnerability. (#6016, 7e9060c) * Fixed: XSS vulnerability in default content. (#8861, f285440) I don't believe CVEs were assigned to any of these as far as I can tell. -- Vincent Danen / Red Hat Product Security
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.