jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-qrcode | May 4, 2022 | Apr 20, 2019 |
| Alpine Linux | — | Upgrade rabbitmq-serverUpgrade drupal7 | Jun 21, 2019 | Apr 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-client-commonUpgrade ipa-server-commonUpgrade pcs-snmpUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade pcsUpgrade ipa-commonUpgrade pcs-debuginfoUpgrade ipa-server-dnsUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-server-trust-ad | Oct 28, 2020 | Apr 20, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 19, 2019 |
| Centos_linux | — | Upgrade pki-tools-debuginfoUpgrade jakarta-commons-httpclientUpgrade opendnssec-debuginfoUpgrade pki-core-debugsourceUpgrade slapi-nisUpgrade ldapjdkUpgrade ipa-server-debuginfoUpgrade python3-qrcodeUpgrade xml-commons-apisUpgrade ipa-healthcheckUpgrade jackson-annotationsUpgrade stax-exUpgrade jackson-jaxrs-providersUpgrade pki-kraUpgrade python2-ipaserverUpgrade slapi-nis-debuginfoUpgrade ipa-clientUpgrade tomcatjssUpgrade python3-pkiUpgrade jackson-coreUpgrade slf4jUpgrade slf4j-jdk14Upgrade ipa-commonUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-serverUpgrade softhsm-debuginfoUpgrade velocityUpgrade glassfish-fastinfosetUpgrade softhsm-develUpgrade xalan-j2Upgrade jss-debugsourceUpgrade python3-ipaclientUpgrade ipa-server-trust-ad-debuginfoUpgrade jackson-jaxrs-json-providerUpgrade xsomUpgrade apache-commons-langUpgrade bind-dyndb-ldap-debugsourceUpgrade pki-servlet-engineUpgrade bind-dyndb-ldapUpgrade pki-caUpgrade python-nss-debugsourceUpgrade ipa-selinuxUpgrade jss-javadocUpgrade ipa-client-epnUpgrade pki-symkey-debuginfoUpgrade pcs-snmpUpgrade resteasyUpgrade relaxngDatatypeUpgrade slapi-nis-debugsourceUpgrade pki-base-javaUpgrade jackson-module-jaxb-annotationsUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade python3-yubicoUpgrade pki-serverUpgrade ipa-healthcheck-coreUpgrade pcsUpgrade python3-kdcproxyUpgrade ipa-python-compatUpgrade pki-symkeyUpgrade ipa-server-dnsUpgrade glassfish-jaxb-coreUpgrade apache-commons-collectionsUpgrade python3-custodiaUpgrade ipa-server-trust-adUpgrade python-nss-docUpgrade ipa-client-debuginfoUpgrade jss-debuginfoUpgrade ipa-debuginfoUpgrade xerces-j2Upgrade ipa-client-commonUpgrade javassistUpgrade glassfish-jaxb-runtimeUpgrade pcs-debuginfoUpgrade ipa-debugsourceUpgrade jssUpgrade pki-baseUpgrade python2-ipalibUpgrade custodiaUpgrade pki-servlet-4.0-apiUpgrade softhsm-debugsourceUpgrade pki-core-debuginfoUpgrade glassfish-jaxb-txw2Upgrade bea-stax-apiUpgrade jackson-databindUpgrade xmlstreambufferUpgrade softhsmUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade xml-commons-resolverUpgrade apache-commons-netUpgrade python3-ipalibUpgrade python2-ipaclientUpgrade opendnssec-debugsourceUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade opendnssecUpgrade ipa-server-commonUpgrade javassist-javadoc | Oct 1, 2020 | Apr 20, 2019 |
| Debian | — | Upgrade node-jqueryUpgrade mediawikiUpgrade otrs2 | Apr 22, 2019 | Apr 19, 2019 |
| Drupal | — | Upgrade to drupal version 8.6.1Upgrade to drupal version 7.66Upgrade to drupal version 8.5.1 | Apr 23, 2019 | Apr 19, 2019 |
| Freebsd | — | Upgrade py35-django21Upgrade py37-django22Upgrade py27-django111Upgrade mediawiki132Upgrade py35-django22Upgrade py36-django22Upgrade py37-django21Upgrade mediawiki131Upgrade py37-django111Upgrade py36-django21Upgrade py35-django111Upgrade py36-django111 | Jul 5, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-toolsUpgrade pki-kraUpgrade pki-baseUpgrade pki-symkeyUpgrade pki-caUpgrade pki-server | Feb 22, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-caUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-toolsUpgrade pki-base | Apr 30, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-baseUpgrade pki-kraUpgrade pki-toolsUpgrade pki-base-javaUpgrade pki-caUpgrade pki-symkeyUpgrade pki-server | Dec 16, 2020 | Apr 20, 2019 |
| Jquery | — | Upgrade jQuery to version 3.4.0 | Apr 24, 2019 | Apr 20, 2019 |
| Oracle Solaris | — | Upgrade library/python/django-35 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-34 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/django-26 to version 1.4.22-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python-2/django-26 to version 1.4.22-11.4.0.0.0.13.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-27 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/django to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4Upgrade legacy/library/python/django-35 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python-2/django to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade network/amqp/rabbitmq to version 3.8.3-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python-2/django-27 to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4 | Oct 16, 2019 | Apr 20, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0. | Oct 17, 2019 | Apr 20, 2019 |
| Oracle_linux | — | Upgrade jss-javadocUpgrade pki-servlet-engineUpgrade softhsm-develUpgrade glassfish-jaxb-apiUpgrade pki-serverUpgrade relaxngDatatypeUpgrade apache-commons-collectionsUpgrade ipa-serverUpgrade xalan-j2Upgrade apache-commons-netUpgrade pcsUpgrade glassfish-fastinfosetUpgrade python3-pyusbUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade velocityUpgrade python3-ipaserverUpgrade javassistUpgrade slf4jUpgrade python2-ipalibUpgrade glassfish-jaxb-coreUpgrade ldapjdk-javadocUpgrade javassist-javadocUpgrade ipa-server-commonUpgrade ipa-client-sambaUpgrade ipa-client-commonUpgrade apache-commons-langUpgrade python3-ipalibUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade ipa-commonUpgrade softhsmUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade bea-stax-apiUpgrade slapi-nisUpgrade glassfish-jaxb-txw2Upgrade ipa-clientUpgrade tomcatjssUpgrade python3-pkiUpgrade ldapjdkUpgrade jackson-module-jaxb-annotationsUpgrade python3-yubicoUpgrade resteasyUpgrade jakarta-commons-httpclientUpgrade ipa-python-compatUpgrade python3-jwcryptoUpgrade opendnssecUpgrade xsomUpgrade python3-ipaclientUpgrade pki-baseUpgrade pki-caUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade xml-commons-apisUpgrade jackson-jaxrs-json-providerUpgrade xmlstreambufferUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade xerces-j2Upgrade ipa-healthcheckUpgrade custodiaUpgrade ipa-client-epnUpgrade stax-exUpgrade ipa-selinuxUpgrade jssUpgrade jackson-jaxrs-providersUpgrade python2-ipaserverUpgrade pki-kraUpgrade jackson-coreUpgrade pcs-snmpUpgrade xml-commons-resolverUpgrade slf4j-jdk14Upgrade python-nss-docUpgrade jackson-databindUpgrade glassfish-jaxb-runtimeUpgrade pki-toolsUpgrade pki-servlet-4.0-apiUpgrade python3-nss | Oct 7, 2020 | Mar 27, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Apr 20, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 27, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 20, 2019 |
| Redhat Openshift | — | Upgrade openshift-ansibleUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idlerUpgrade openshift-enterprise-autohealUpgrade jenkinsUpgrade golang-github-prometheus-alertmanagerUpgrade golang-github-prometheus-node_exporterUpgrade jenkins-2-pluginsUpgrade openshift-enterprise-cluster-capacityUpgrade openshift-kuryrUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshiftUpgrade atomic-enterprise-service-catalogUpgrade cri-oUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-openshift-deschedulerUpgrade atomic-openshift-web-consoleUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-metrics-server | Dec 29, 2020 | Mar 27, 2019 |
| Redhat_linux | — | Upgrade jackson-module-jaxb-annotationsUpgrade ipa-server-dnsUpgrade bea-stax-apiUpgrade jss-javadocUpgrade pki-symkey-debuginfoUpgrade python2-ipaclientUpgrade slapi-nis-debugsourceUpgrade stax-exUpgrade softhsm-debugsourceUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade python3-ipaserverUpgrade pki-tools-debuginfoUpgrade xml-commons-apisUpgrade glassfish-fastinfosetUpgrade xmlstreambufferUpgrade ipa-server-trust-adUpgrade python3-yubicoUpgrade slapi-nisUpgrade python3-qrcode-coreUpgrade glassfish-jaxb-coreUpgrade javassistUpgrade python2-ipalibNo solution existsUpgrade ipa-python-compatUpgrade apache-commons-langUpgrade jakarta-commons-httpclientUpgrade pki-servlet-engineUpgrade slf4j-jdk14Upgrade softhsmUpgrade ipa-server-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-pkiUpgrade ldapjdk-javadocUpgrade opendnssecUpgrade pki-base-javaUpgrade ldapjdkUpgrade opendnssec-debuginfoUpgrade python3-pyusbUpgrade ipa-client-epnUpgrade ipa-client-debuginfoUpgrade xerces-j2Upgrade ipa-serverUpgrade jackson-jaxrs-providersUpgrade python3-custodiaUpgrade slapi-nis-debuginfoUpgrade ipa-client-commonUpgrade softhsm-develUpgrade python3-jwcryptoUpgrade glassfish-jaxb-apiUpgrade resteasyUpgrade velocityUpgrade pcs-snmpUpgrade python-nss-docUpgrade ipa-client-sambaUpgrade tomcatjssUpgrade ipa-commonUpgrade xalan-j2Upgrade python3-qrcodeUpgrade apache-commons-netUpgrade pki-core-debugsourceUpgrade jackson-jaxrs-json-providerUpgrade python-nss-debugsourceUpgrade python3-ipaclientUpgrade xml-commons-resolverUpgrade ipa-selinuxUpgrade pki-caUpgrade ipa-healthcheckUpgrade pcs-debuginfoUpgrade python3-nssUpgrade ipa-healthcheck-coreUpgrade slf4jUpgrade apache-commons-collectionsUpgrade glassfish-jaxb-txw2Upgrade python3-nss-debuginfoUpgrade python3-kdcproxyUpgrade jss-debugsourceUpgrade relaxngDatatypeUpgrade jackson-annotationsUpgrade jss-debuginfoUpgrade bind-dyndb-ldapUpgrade jackson-databindUpgrade opendnssec-debugsourceUpgrade ipa-server-commonUpgrade pki-symkeyUpgrade jackson-coreUpgrade pki-serverUpgrade softhsm-debuginfoUpgrade pki-kraUpgrade ipa-debugsourceUpgrade pki-core-debuginfoUpgrade jssUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-toolsUpgrade javassist-javadocUpgrade custodiaUpgrade python2-ipaserverUpgrade bind-dyndb-ldap-debugsourceUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade pcsUpgrade xsomUpgrade pki-baseUpgrade python3-ipalib | Oct 1, 2020 | Apr 20, 2019 |
| Rocky_linux | — | Upgrade pcs-snmpUpgrade python-nss-debugsourceUpgrade python3-nss-debuginfoUpgrade pcsUpgrade python-nss-docUpgrade python3-nss | Mar 12, 2024 | Apr 20, 2019 |
| Suse | — | Upgrade python3-django | Aug 9, 2019 | Apr 19, 2019 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro) | Jun 26, 2025 | Apr 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub