jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade custodiaUpgrade python3-custodiaUpgrade python3-jwcrypto | May 4, 2022 | Apr 20, 2019 |
| Alpine Linux | — | Upgrade drupal7Upgrade rabbitmq-server | Jun 21, 2019 | Apr 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipalibUpgrade pcs-snmpUpgrade pcsUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-commonUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-server-commonUpgrade ipa-server-dnsUpgrade pcs-debuginfoUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade python2-ipaserver | Oct 28, 2020 | Apr 20, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 19, 2019 |
| Centos_linux | — | Upgrade pki-core-debugsourceUpgrade softhsm-debugsourceUpgrade jssUpgrade ipa-debugsourceUpgrade pki-servlet-4.0-apiUpgrade slapi-nisUpgrade ldapjdkUpgrade python3-kdcproxyUpgrade python2-ipaserverUpgrade ipa-clientUpgrade velocityUpgrade pki-kraUpgrade ipa-client-sambaUpgrade jackson-coreUpgrade xsomUpgrade stax-exUpgrade ipa-healthcheckUpgrade tomcatjssUpgrade python3-pkiUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade python3-yubicoUpgrade slapi-nis-debuginfoUpgrade slf4jUpgrade jackson-jaxrs-json-providerUpgrade pki-servlet-engineUpgrade glassfish-fastinfosetUpgrade python-nss-debugsourceUpgrade slf4j-jdk14Upgrade jackson-jaxrs-providersUpgrade pki-symkey-debuginfoUpgrade jss-javadocUpgrade bind-dyndb-ldapUpgrade pcs-snmpUpgrade bind-dyndb-ldap-debuginfoUpgrade xalan-j2Upgrade softhsm-develUpgrade apache-commons-langUpgrade pki-serverUpgrade pki-base-javaUpgrade xml-commons-apisUpgrade relaxngDatatypeUpgrade softhsm-debuginfoUpgrade pki-toolsUpgrade jackson-annotationsUpgrade ipa-commonUpgrade jackson-module-jaxb-annotationsUpgrade ipa-serverUpgrade ipa-selinuxUpgrade slapi-nis-debugsourceUpgrade pki-caUpgrade python3-ipaclientUpgrade jss-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-ipaserverUpgrade python3-nss-debuginfoUpgrade ldapjdk-javadocUpgrade bind-dyndb-ldap-debugsourceUpgrade resteasyUpgrade bea-stax-apiUpgrade xmlstreambufferUpgrade python3-qrcode-coreUpgrade pki-core-debuginfoUpgrade custodiaUpgrade python2-ipalibUpgrade python3-custodiaUpgrade ipa-server-trust-adUpgrade pki-tools-debuginfoUpgrade pki-baseUpgrade pcs-debuginfoUpgrade ipa-server-debuginfoUpgrade pki-symkeyUpgrade apache-commons-netUpgrade glassfish-jaxb-runtimeUpgrade ipa-client-commonUpgrade opendnssec-debuginfoUpgrade glassfish-jaxb-apiUpgrade javassistUpgrade xerces-j2Upgrade python3-nssUpgrade python3-pyusbUpgrade python-nss-docUpgrade jss-debuginfoUpgrade python3-qrcodeUpgrade jakarta-commons-httpclientUpgrade ipa-server-commonUpgrade glassfish-jaxb-txw2Upgrade javassist-javadocUpgrade apache-commons-collectionsUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade jackson-databindUpgrade opendnssecUpgrade ipa-healthcheck-coreUpgrade ipa-debuginfoUpgrade glassfish-jaxb-coreUpgrade xml-commons-resolverUpgrade python2-ipaclientUpgrade python3-ipalibUpgrade opendnssec-debugsourceUpgrade pcsUpgrade softhsm | Oct 1, 2020 | Apr 20, 2019 |
| Debian | — | Upgrade mediawikiUpgrade node-jqueryUpgrade otrs2 | Apr 22, 2019 | Apr 19, 2019 |
| Drupal | — | Upgrade to drupal version 8.6.1Upgrade to drupal version 7.66Upgrade to drupal version 8.5.1 | Apr 23, 2019 | Apr 19, 2019 |
| Freebsd | — | Upgrade py36-django21Upgrade py35-django111Upgrade mediawiki131Upgrade py37-django111Upgrade py36-django22Upgrade py37-django21Upgrade py36-django111Upgrade mediawiki132Upgrade py37-django22Upgrade py35-django22Upgrade py35-django21Upgrade py27-django111 | Jul 5, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-kraUpgrade pki-toolsUpgrade pki-serverUpgrade pki-caUpgrade pki-symkeyUpgrade pki-base | Feb 22, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-base-javaUpgrade pki-toolsUpgrade pki-kraUpgrade pki-serverUpgrade pki-caUpgrade pki-symkeyUpgrade pki-base | Apr 30, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-toolsUpgrade pki-base-javaUpgrade pki-serverUpgrade pki-kraUpgrade pki-symkeyUpgrade pki-caUpgrade pki-base | Dec 16, 2020 | Apr 20, 2019 |
| Jquery | — | Upgrade jQuery to version 3.4.0 | Apr 24, 2019 | Apr 20, 2019 |
| Oracle Solaris | — | Upgrade library/python-2/django to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python-2/django-26 to version 1.4.22-11.4.0.0.0.13.0 on Solaris 11.4Upgrade library/python/django-35 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-34 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/django-26 to version 1.4.22-11.4.0.0.1.9.0 on Solaris 11.4Upgrade legacy/library/python/django-27 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-35 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade network/amqp/rabbitmq to version 3.8.3-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python-2/django-27 to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4 | Oct 16, 2019 | Apr 20, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0.Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0. | Oct 17, 2019 | Apr 20, 2019 |
| Oracle_linux | — | Upgrade slf4j-jdk14Upgrade python3-qrcodeUpgrade xerces-j2Upgrade pki-kraUpgrade pki-symkeyUpgrade python3-kdcproxyUpgrade jackson-jaxrs-json-providerUpgrade custodiaUpgrade glassfish-jaxb-runtimeUpgrade pki-toolsUpgrade xml-commons-apisUpgrade pki-servlet-4.0-apiUpgrade python2-ipaserverUpgrade ipa-client-epnUpgrade jssUpgrade jackson-jaxrs-providersUpgrade ipa-selinuxUpgrade stax-exUpgrade xsomUpgrade ipa-healthcheckUpgrade jackson-databindUpgrade python3-ipaclientUpgrade xmlstreambufferUpgrade xml-commons-resolverUpgrade pcs-snmpUpgrade jackson-coreUpgrade pki-baseUpgrade pki-caUpgrade python3-nssUpgrade python-nss-docUpgrade ipa-healthcheck-coreUpgrade slf4jUpgrade ipa-client-sambaUpgrade ldapjdkUpgrade apache-commons-langUpgrade jackson-module-jaxb-annotationsUpgrade opendnssecUpgrade resteasyUpgrade jakarta-commons-httpclientUpgrade python3-yubicoUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade velocityUpgrade glassfish-jaxb-apiUpgrade ipa-server-commonUpgrade python3-pkiUpgrade python2-ipalibUpgrade ipa-clientUpgrade jackson-annotationsUpgrade pki-base-javaUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade pcsUpgrade apache-commons-netUpgrade python3-custodiaUpgrade pki-serverUpgrade javassistUpgrade relaxngDatatypeUpgrade bind-dyndb-ldapUpgrade apache-commons-collectionsUpgrade glassfish-fastinfosetUpgrade bea-stax-apiUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade softhsmUpgrade tomcatjssUpgrade python3-pyusbUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-txw2Upgrade xalan-j2Upgrade ipa-commonUpgrade ipa-client-commonUpgrade python3-ipalibUpgrade ipa-serverUpgrade jss-javadocUpgrade python3-ipaserverUpgrade pki-servlet-engineUpgrade glassfish-jaxb-coreUpgrade javassist-javadocUpgrade ipa-server-dns | Oct 7, 2020 | Mar 27, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Apr 20, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 27, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 20, 2019 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-web-consoleUpgrade golang-github-openshift-oauth-proxyUpgrade openshift-kuryrUpgrade jenkins-2-pluginsUpgrade cri-oUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshift-cluster-autoscalerUpgrade openshift-enterprise-cluster-capacityUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-node-problem-detectorUpgrade atomic-openshift-deschedulerUpgrade golang-github-prometheus-node_exporterUpgrade openshift-enterprise-autohealUpgrade jenkinsUpgrade openshift-ansibleUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idler | Dec 29, 2020 | Mar 27, 2019 |
| Redhat_linux | — | Upgrade ipa-client-epnUpgrade python3-custodiaUpgrade softhsm-develUpgrade pcs-snmpUpgrade ipa-serverUpgrade jss-javadocUpgrade ldapjdkUpgrade slf4j-jdk14Upgrade ipa-client-commonUpgrade opendnssec-debuginfoUpgrade ipa-commonUpgrade slapi-nisUpgrade slapi-nis-debuginfoUpgrade xmlstreambufferUpgrade softhsm-debugsourceUpgrade pki-tools-debuginfoUpgrade glassfish-fastinfosetUpgrade python3-ipaserverUpgrade ipa-python-compatUpgrade pki-symkey-debuginfoUpgrade ipa-server-trust-adUpgrade pki-servlet-engineUpgrade python3-yubicoNo solution existsUpgrade bea-stax-apiUpgrade bind-dyndb-ldap-debuginfoUpgrade jakarta-commons-httpclientUpgrade tomcatjssUpgrade stax-exUpgrade python3-pyusbUpgrade ipa-debuginfoUpgrade jackson-jaxrs-providersUpgrade python2-ipalibUpgrade jackson-module-jaxb-annotationsUpgrade python2-ipaclientUpgrade xerces-j2Upgrade python3-pkiUpgrade ipa-client-debuginfoUpgrade javassistUpgrade ldapjdk-javadocUpgrade glassfish-jaxb-apiUpgrade slapi-nis-debugsourceUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade xml-commons-apisUpgrade glassfish-jaxb-coreUpgrade ipa-clientUpgrade opendnssecUpgrade python3-jwcryptoUpgrade softhsmUpgrade resteasyUpgrade ipa-server-trust-ad-debuginfoUpgrade pki-base-javaUpgrade ipa-server-commonUpgrade velocityUpgrade slf4jUpgrade jssUpgrade apache-commons-langUpgrade ipa-server-debuginfoUpgrade relaxngDatatypeUpgrade python-nss-debugsourceUpgrade bind-dyndb-ldap-debugsourceUpgrade pcs-debuginfoUpgrade python-nss-docUpgrade jackson-jaxrs-json-providerUpgrade python3-ipaclientUpgrade apache-commons-netUpgrade python3-qrcodeUpgrade ipa-client-sambaUpgrade python3-ipalibUpgrade xsomUpgrade pki-symkeyUpgrade pki-core-debuginfoUpgrade jackson-coreUpgrade ipa-healthcheckUpgrade jss-debugsourceUpgrade ipa-healthcheck-coreUpgrade pki-core-debugsourceUpgrade ipa-selinuxUpgrade jackson-annotationsUpgrade glassfish-jaxb-runtimeUpgrade opendnssec-debugsourceUpgrade ipa-debugsourceUpgrade pki-servlet-4.0-apiUpgrade pki-serverUpgrade javassist-javadocUpgrade xalan-j2Upgrade pki-kraUpgrade jss-debuginfoUpgrade softhsm-debuginfoUpgrade pcsUpgrade python3-nssUpgrade custodiaUpgrade pki-baseUpgrade pki-toolsUpgrade jackson-databindUpgrade glassfish-jaxb-txw2Upgrade bind-dyndb-ldapUpgrade python3-kdcproxyUpgrade xml-commons-resolverUpgrade apache-commons-collectionsUpgrade python3-nss-debuginfoUpgrade python2-ipaserverUpgrade pki-ca | Oct 1, 2020 | Apr 20, 2019 |
| Rocky_linux | — | Upgrade python3-nssUpgrade python-nss-docUpgrade pcsUpgrade python-nss-debugsourceUpgrade pcs-snmpUpgrade python3-nss-debuginfo | Mar 12, 2024 | Apr 20, 2019 |
| Suse | — | Upgrade python3-django | Aug 9, 2019 | Apr 19, 2019 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro) | Jun 26, 2025 | Apr 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub