The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade python3-pyusbUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-yubico | May 4, 2022 | Apr 20, 2019 |
| Alpine Linux | — | Upgrade drupal7Upgrade rabbitmq-server | Jun 21, 2019 | Apr 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade pcs-snmpUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade pcs-debuginfoUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade ipa-client-commonUpgrade pcsUpgrade ipa-debuginfo | Oct 28, 2020 | Apr 20, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 19, 2019 |
| Centos_linux | — | Upgrade softhsm-debugsourceUpgrade pki-core-debuginfoUpgrade jssUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade opendnssecUpgrade ipa-client-commonUpgrade jss-debuginfoUpgrade custodiaUpgrade opendnssec-debuginfoUpgrade python3-qrcode-coreUpgrade xml-commons-resolverUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade pcsUpgrade jakarta-commons-httpclientUpgrade pki-baseUpgrade glassfish-jaxb-apiUpgrade softhsmUpgrade opendnssec-debugsourceUpgrade pki-core-debugsourceUpgrade ipa-debugsourceUpgrade pki-tools-debuginfoUpgrade python3-nssUpgrade xmlstreambufferUpgrade ipa-server-commonUpgrade python3-custodiaUpgrade ipa-healthcheck-coreUpgrade apache-commons-netUpgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade slapi-nisUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade glassfish-jaxb-txw2Upgrade pki-symkeyUpgrade python3-qrcodeUpgrade ldapjdkUpgrade jackson-databindUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade pki-servlet-4.0-apiUpgrade python3-kdcproxyUpgrade xerces-j2Upgrade pcs-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-server-dnsUpgrade python3-pyusbUpgrade javassistUpgrade ipa-client-debuginfoUpgrade python-nss-docUpgrade glassfish-jaxb-runtimeUpgrade pki-base-javaUpgrade pki-kraUpgrade xsomUpgrade jackson-module-jaxb-annotationsUpgrade jackson-coreUpgrade relaxngDatatypeUpgrade jackson-jaxrs-json-providerUpgrade python3-nss-debuginfoUpgrade pki-caUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-toolsUpgrade python-nss-debugsourceUpgrade jss-javadocUpgrade pki-servlet-engineUpgrade pki-serverUpgrade python3-yubicoUpgrade pcs-snmpUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade pki-symkey-debuginfoUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade xalan-j2Upgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade xml-commons-apisUpgrade softhsm-develUpgrade velocityUpgrade ipa-commonUpgrade slf4jUpgrade python3-pkiUpgrade glassfish-fastinfosetUpgrade jss-debugsourceUpgrade ipa-client-sambaUpgrade ipa-serverUpgrade tomcatjssUpgrade python3-ipaclientUpgrade apache-commons-langUpgrade ipa-healthcheckUpgrade python3-ipaserverUpgrade ldapjdk-javadocUpgrade jackson-annotationsUpgrade stax-exUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade slapi-nis-debugsourceUpgrade softhsm-debuginfoUpgrade resteasyUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debugsource | Oct 1, 2020 | Apr 20, 2019 |
| Debian | — | Upgrade node-jqueryUpgrade mediawikiUpgrade otrs2 | Apr 22, 2019 | Apr 19, 2019 |
| Drupal | — | Upgrade to drupal version 7.66Upgrade to drupal version 8.6.1Upgrade to drupal version 8.5.1 | Apr 23, 2019 | Apr 19, 2019 |
| Freebsd | — | Upgrade py36-django22Upgrade py37-django21Upgrade py35-django111Upgrade py36-django21Upgrade py37-django111Upgrade py36-django111Upgrade mediawiki131Upgrade py37-django22Upgrade py35-django22Upgrade py27-django111Upgrade mediawiki132Upgrade py35-django21 | Jul 5, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-symkeyUpgrade pki-caUpgrade pki-serverUpgrade pki-baseUpgrade pki-kraUpgrade pki-tools | Feb 22, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-baseUpgrade pki-base-javaUpgrade pki-toolsUpgrade pki-symkeyUpgrade pki-caUpgrade pki-kraUpgrade pki-server | Apr 30, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-baseUpgrade pki-base-javaUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-kraUpgrade pki-caUpgrade pki-server | Dec 16, 2020 | Apr 20, 2019 |
| Jquery | — | Upgrade jQuery to version 3.4.0 | Apr 24, 2019 | Apr 20, 2019 |
| Oracle Solaris | — | Upgrade library/python-2/django to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-27 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4Upgrade library/python/django-26 to version 1.4.22-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-35 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python-2/django-26 to version 1.4.22-11.4.0.0.0.13.0 on Solaris 11.4Upgrade legacy/library/python/django-34 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade network/amqp/rabbitmq to version 3.8.3-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python-2/django-27 to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4 | Oct 16, 2019 | Apr 20, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Apr 20, 2019 |
| Oracle_linux | — | Upgrade python2-ipaserverUpgrade pki-servlet-4.0-apiUpgrade glassfish-jaxb-runtimeUpgrade pki-toolsUpgrade jackson-coreUpgrade ipa-healthcheckUpgrade custodiaUpgrade pki-caUpgrade python3-ipaclientUpgrade xml-commons-resolverUpgrade python3-nssUpgrade xmlstreambufferUpgrade xsomUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade pki-baseUpgrade pcs-snmpUpgrade ipa-healthcheck-coreUpgrade slf4j-jdk14Upgrade xml-commons-apisUpgrade jackson-databindUpgrade jackson-jaxrs-json-providerUpgrade jackson-jaxrs-providersUpgrade ipa-selinuxUpgrade xerces-j2Upgrade stax-exUpgrade jssUpgrade pki-symkeyUpgrade python-nss-docUpgrade pki-kraUpgrade python3-kdcproxyUpgrade slf4jUpgrade ipa-server-commonUpgrade python3-pyusbUpgrade ipa-clientUpgrade python3-jwcryptoUpgrade pki-base-javaUpgrade slapi-nisUpgrade ipa-client-commonUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-coreUpgrade python2-ipalibUpgrade ipa-commonUpgrade glassfish-jaxb-apiUpgrade velocityUpgrade pki-servlet-engineUpgrade python3-pkiUpgrade ipa-python-compatUpgrade jakarta-commons-httpclientUpgrade python3-yubicoUpgrade pki-serverUpgrade javassistUpgrade relaxngDatatypeUpgrade apache-commons-collectionsUpgrade pcsUpgrade apache-commons-netUpgrade python3-custodiaUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade python2-ipaclientUpgrade jackson-module-jaxb-annotationsUpgrade apache-commons-langUpgrade softhsmUpgrade bea-stax-apiUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-txw2Upgrade softhsm-develUpgrade resteasyUpgrade xalan-j2Upgrade ldapjdkUpgrade glassfish-fastinfosetUpgrade python3-ipalibUpgrade javassist-javadocUpgrade python3-ipaserverUpgrade jss-javadocUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade tomcatjssUpgrade opendnssecUpgrade jackson-annotations | Oct 7, 2020 | Mar 27, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Apr 20, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 27, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 20, 2019 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade atomic-openshift-cluster-autoscalerUpgrade openshift-enterprise-cluster-capacityUpgrade cri-oUpgrade golang-github-openshift-oauth-proxyUpgrade jenkins-2-pluginsUpgrade atomic-openshift-metrics-serverUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-deschedulerUpgrade openshift-kuryrUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-web-consoleUpgrade openshift-enterprise-autohealUpgrade atomic-openshift-dockerregistryUpgrade jenkinsUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-service-idlerUpgrade golang-github-prometheus-node_exporterUpgrade openshift-ansible | Dec 29, 2020 | Mar 27, 2019 |
| Redhat_linux | — | Upgrade python3-ipalibUpgrade jackson-databindUpgrade softhsm-debuginfoUpgrade apache-commons-collectionsUpgrade pcsUpgrade ipa-debugsourceUpgrade pki-servlet-4.0-apiUpgrade python3-nssUpgrade pki-kraUpgrade jss-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-baseUpgrade pki-serverUpgrade jssUpgrade ipa-server-commonUpgrade jackson-coreUpgrade jss-debugsourceUpgrade xalan-j2Upgrade python3-ipaclientUpgrade pcs-debuginfoUpgrade ipa-client-sambaUpgrade ipa-healthcheckUpgrade python3-nss-debuginfoUpgrade ipa-selinuxUpgrade python2-ipaserverUpgrade pki-caUpgrade javassist-javadocUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade pki-core-debugsourceUpgrade jackson-annotationsUpgrade bind-dyndb-ldap-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade bind-dyndb-ldapUpgrade relaxngDatatypeUpgrade glassfish-jaxb-txw2Upgrade opendnssec-debugsourceUpgrade xml-commons-resolverUpgrade custodiaUpgrade python-nss-docUpgrade python-nss-debugsourceUpgrade apache-commons-netUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade xsomUpgrade slf4jUpgrade pki-toolsUpgrade ipa-healthcheck-coreUpgrade jss-javadocUpgrade ipa-server-debuginfoUpgrade glassfish-fastinfosetUpgrade python3-yubicoUpgrade stax-exUpgrade jackson-module-jaxb-annotationsUpgrade ipa-debuginfoUpgrade xml-commons-apisUpgrade ipa-clientUpgrade python2-ipalibUpgrade pki-tools-debuginfoUpgrade ipa-client-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssecUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade python3-ipaserverUpgrade slapi-nisUpgrade apache-commons-langUpgrade pki-servlet-engineUpgrade python3-pkiUpgrade pcs-snmpUpgrade glassfish-jaxb-apiUpgrade slapi-nis-debugsourceUpgrade softhsm-develUpgrade xmlstreambufferUpgrade ldapjdkUpgrade ipa-serverUpgrade jakarta-commons-httpclientUpgrade javassistUpgrade ipa-server-dnsUpgrade velocityUpgrade python3-custodiaUpgrade python3-pyusbUpgrade xerces-j2Upgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade ipa-client-debuginfoUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade python3-qrcode-coreUpgrade bea-stax-apiUpgrade tomcatjssUpgrade ipa-commonUpgrade resteasyUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade ipa-python-compatUpgrade pki-symkey-debuginfoUpgrade ipa-server-trust-adUpgrade softhsmUpgrade softhsm-debugsourceUpgrade pki-base-javaUpgrade python2-ipaclientNo solution exists | Oct 1, 2020 | Apr 20, 2019 |
| Rocky_linux | — | Upgrade pcsUpgrade python3-nssUpgrade python-nss-docUpgrade python3-nss-debuginfoUpgrade pcs-snmpUpgrade python-nss-debugsource | Mar 12, 2024 | Apr 20, 2019 |
| Suse | — | Upgrade python3-django | Aug 9, 2019 | Apr 19, 2019 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro) | Jun 26, 2025 | Apr 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub