Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 14 Nov 2014 08:29:42 -0700
From: "Vincent Danen" <>
To: "OSS Security List" <>
Subject: old CVE assignments for JQuery 1.10.0

A title XSS was fixed in JQuery 1.10.0 back in November 2012 (with the 
release of 1.10.0 in January 2013):

Looking at the changelog it also seems like there are others:

* Fixed: XSS in combobox demo. (#8859, 5fee6fd)
* Fixed: Title XSS Vulnerability. (#6016, 7e9060c)
* Fixed: XSS vulnerability in default content. (#8861, f285440)

I don't believe CVEs were assigned to any of these as far as I can tell.

Vincent Danen / Red Hat Product Security

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.