jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade python3-yubicoUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-custodia | May 4, 2022 | Apr 20, 2019 |
| Alpine Linux | — | Upgrade drupal7Upgrade rabbitmq-server | Jun 21, 2019 | Apr 19, 2019 |
| Amazon Linux Ami 2 | — | Upgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-serverUpgrade pcs-debuginfoUpgrade pcsUpgrade ipa-commonUpgrade pcs-snmpUpgrade ipa-server-commonUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipaserverUpgrade ipa-server-trust-adUpgrade python2-ipaclient | Oct 28, 2020 | Apr 20, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 19, 2019 |
| Centos_linux | — | Upgrade ipa-client-sambaUpgrade slf4j-jdk14Upgrade softhsm-develUpgrade ipa-commonUpgrade xalan-j2Upgrade ipa-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade apache-commons-langUpgrade ipa-selinuxUpgrade jackson-annotationsUpgrade xsomUpgrade python2-ipaserverUpgrade jackson-jaxrs-providersUpgrade jss-debugsourceUpgrade ldapjdk-javadocUpgrade python3-ipaclientUpgrade pki-caUpgrade relaxngDatatypeUpgrade slapi-nis-debugsourceUpgrade resteasyUpgrade pki-kraUpgrade ipa-healthcheckUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade xml-commons-apisUpgrade stax-exUpgrade tomcatjssUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-debuginfoUpgrade velocityUpgrade jackson-coreUpgrade slapi-nis-debuginfoUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade jackson-module-jaxb-annotationsUpgrade jackson-jaxrs-json-providerUpgrade ipa-client-epnUpgrade pcs-snmpUpgrade python3-pkiUpgrade slf4jUpgrade glassfish-fastinfosetUpgrade pki-symkey-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-yubicoUpgrade pki-servlet-engineUpgrade python-nss-debugsourceUpgrade pki-serverUpgrade pki-base-javaUpgrade jss-javadocUpgrade pki-core-debuginfoUpgrade softhsm-debugsourceUpgrade python2-ipalibUpgrade pcs-debuginfoUpgrade custodiaUpgrade pki-baseUpgrade bea-stax-apiUpgrade python3-kdcproxyUpgrade glassfish-jaxb-txw2Upgrade jssUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade apache-commons-collectionsUpgrade javassist-javadocUpgrade pki-symkeyUpgrade slapi-nisUpgrade ipa-server-commonUpgrade xml-commons-resolverUpgrade xmlstreambufferUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade softhsmUpgrade pcsUpgrade ipa-debugsourceUpgrade jss-debuginfoUpgrade pki-tools-debuginfoUpgrade python3-qrcodeUpgrade glassfish-jaxb-runtimeUpgrade apache-commons-netUpgrade opendnssec-debuginfoUpgrade python-nss-docUpgrade javassistUpgrade xerces-j2Upgrade ipa-client-commonUpgrade python3-qrcode-coreUpgrade ipa-server-debuginfoUpgrade jakarta-commons-httpclientUpgrade python3-pyusbUpgrade pki-core-debugsourceUpgrade python3-custodiaUpgrade python3-nssUpgrade glassfish-jaxb-apiUpgrade jackson-databindUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade opendnssecUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade glassfish-jaxb-coreUpgrade python3-ipalibUpgrade pki-servlet-4.0-apiUpgrade ldapjdk | Oct 1, 2020 | Apr 20, 2019 |
| Debian | — | Upgrade otrs2Upgrade mediawikiUpgrade node-jquery | Apr 22, 2019 | Apr 19, 2019 |
| Drupal | — | Upgrade to drupal version 8.6.1Upgrade to drupal version 7.66Upgrade to drupal version 8.5.1 | Apr 23, 2019 | Apr 19, 2019 |
| Freebsd | — | Upgrade py37-django22Upgrade py35-django22Upgrade py35-django21Upgrade mediawiki132Upgrade py27-django111Upgrade py36-django21Upgrade py36-django111Upgrade py37-django21Upgrade py36-django22Upgrade py37-django111Upgrade mediawiki131Upgrade py35-django111 | Jul 5, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pki-caUpgrade pki-symkeyUpgrade pki-baseUpgrade pki-serverUpgrade pki-toolsUpgrade pki-kra | Feb 22, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pki-serverUpgrade pki-symkeyUpgrade pki-toolsUpgrade pki-kraUpgrade pki-caUpgrade pki-base-javaUpgrade pki-base | Apr 30, 2021 | Apr 20, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pki-baseUpgrade pki-serverUpgrade pki-symkeyUpgrade pki-base-javaUpgrade pki-kraUpgrade pki-toolsUpgrade pki-ca | Dec 16, 2020 | Apr 20, 2019 |
| Jquery | — | Upgrade jQuery to version 3.4.0 | Apr 24, 2019 | Apr 20, 2019 |
| Oracle Solaris | — | Upgrade library/python/django-35 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/django to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade library/python/django-27 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade legacy/library/python/django-27 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade legacy/library/python/django-35 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python/django-26 to version 1.4.22-11.4.0.0.1.9.0 on Solaris 11.4Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.24.0.1.75.3 on Solaris 11.4Upgrade legacy/library/python/django-34 to version 1.11.29-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/python-2/django to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python-2/django-26 to version 1.4.22-11.4.0.0.0.13.0 on Solaris 11.4Upgrade library/python-2/django-27 to version 1.4.10-11.4.0.0.1.9.0 on Solaris 11.4Upgrade library/python/django-34 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4Upgrade network/amqp/rabbitmq to version 3.8.3-11.4.24.0.1.75.1 on Solaris 11.4Upgrade library/python/django-37 to version 1.11.23-11.4.14.0.1.3.0 on Solaris 11.4 | Oct 16, 2019 | Apr 20, 2019 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 30108725 for version 12.1.3.0.0.Apply the Patch Set Update (PSU) 30386660 for version 12.2.1.3.0. | Oct 17, 2019 | Apr 20, 2019 |
| Oracle_linux | — | Upgrade python3-yubicoUpgrade python3-pyusbUpgrade glassfish-jaxb-coreUpgrade python2-ipalibUpgrade jackson-annotationsUpgrade jackson-module-jaxb-annotationsUpgrade softhsm-develUpgrade pcsUpgrade javassist-javadocUpgrade velocityUpgrade ldapjdkUpgrade python3-ipaserverUpgrade apache-commons-langUpgrade glassfish-fastinfosetUpgrade ipa-python-compatUpgrade javassistUpgrade ipa-server-commonUpgrade python3-qrcode-coreUpgrade ipa-client-sambaUpgrade jakarta-commons-httpclientUpgrade ldapjdk-javadocUpgrade pki-base-javaUpgrade python3-custodiaUpgrade apache-commons-netUpgrade pki-serverUpgrade resteasyUpgrade xalan-j2Upgrade ipa-serverUpgrade python3-jwcryptoUpgrade apache-commons-collectionsUpgrade bind-dyndb-ldapUpgrade glassfish-jaxb-apiUpgrade ipa-client-commonUpgrade relaxngDatatypeUpgrade opendnssecUpgrade glassfish-jaxb-txw2Upgrade ipa-clientUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade slapi-nisUpgrade python3-ipalibUpgrade jss-javadocUpgrade slf4jUpgrade python3-pkiUpgrade pki-servlet-engineUpgrade ipa-server-dnsUpgrade tomcatjssUpgrade python2-ipaclientUpgrade bea-stax-apiUpgrade softhsmUpgrade slf4j-jdk14Upgrade pki-baseUpgrade xsomUpgrade python3-ipaclientUpgrade python3-nssUpgrade jackson-coreUpgrade python-nss-docUpgrade xml-commons-resolverUpgrade xerces-j2Upgrade pki-symkeyUpgrade python3-kdcproxyUpgrade xmlstreambufferUpgrade ipa-client-epnUpgrade python3-qrcodeUpgrade jackson-jaxrs-json-providerUpgrade ipa-selinuxUpgrade python2-ipaserverUpgrade stax-exUpgrade jackson-jaxrs-providersUpgrade xml-commons-apisUpgrade jssUpgrade pcs-snmpUpgrade ipa-healthcheck-coreUpgrade pki-caUpgrade pki-toolsUpgrade glassfish-jaxb-runtimeUpgrade pki-servlet-4.0-apiUpgrade custodiaUpgrade jackson-databindUpgrade pki-kraUpgrade ipa-healthcheck | Oct 7, 2020 | Mar 27, 2019 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.1R9 | Oct 28, 2020 | Apr 20, 2019 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 27, 2019 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Apr 20, 2019 |
| Redhat Openshift | — | Upgrade openshift-enterprise-autohealUpgrade openshift-ansibleUpgrade jenkinsUpgrade golang-github-prometheus-node_exporterUpgrade atomic-openshift-dockerregistryUpgrade atomic-openshift-service-idlerUpgrade golang-github-prometheus-alertmanagerUpgrade openshift-enterprise-cluster-capacityUpgrade atomic-openshift-deschedulerUpgrade jenkins-2-pluginsUpgrade atomic-openshift-node-problem-detectorUpgrade cri-oUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-cluster-autoscalerUpgrade openshift-kuryrUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshift-web-consoleUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift | Dec 29, 2020 | Mar 27, 2019 |
| Redhat_linux | — | Upgrade pki-kraUpgrade slf4jUpgrade glassfish-jaxb-txw2Upgrade apache-commons-netUpgrade pki-serverUpgrade python-nss-debugsourceUpgrade opendnssec-debugsourceUpgrade softhsm-debuginfoUpgrade python-nss-docUpgrade ipa-selinuxUpgrade pcs-debuginfoUpgrade jss-debugsourceUpgrade jackson-databindUpgrade ipa-healthcheckUpgrade pki-symkeyUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheck-coreUpgrade pki-baseUpgrade python3-ipalibUpgrade bind-dyndb-ldap-debugsourceUpgrade xml-commons-resolverUpgrade jackson-annotationsUpgrade apache-commons-collectionsUpgrade pcsUpgrade pki-servlet-4.0-apiUpgrade ipa-debugsourceUpgrade javassist-javadocUpgrade python3-ipaclientUpgrade jss-debuginfoUpgrade python3-nssUpgrade xalan-j2Upgrade jackson-jaxrs-json-providerUpgrade ipa-client-sambaUpgrade bind-dyndb-ldapUpgrade xsomUpgrade glassfish-jaxb-runtimeUpgrade relaxngDatatypeUpgrade python3-qrcodeUpgrade custodiaUpgrade pki-core-debuginfoUpgrade python2-ipaserverUpgrade jackson-coreUpgrade python3-kdcproxyUpgrade jssUpgrade ipa-server-commonUpgrade pki-caUpgrade python3-nss-debuginfoUpgrade pki-toolsUpgrade pki-core-debugsourceUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-client-epnUpgrade python3-pyusbUpgrade pcs-snmpUpgrade python3-qrcode-coreUpgrade python2-ipaclientUpgrade slapi-nis-debugsourceUpgrade stax-exUpgrade javassistUpgrade jackson-module-jaxb-annotationsUpgrade xml-commons-apisUpgrade slapi-nis-debuginfoUpgrade xerces-j2Upgrade python3-jwcryptoUpgrade opendnssec-debuginfoNo solution existsUpgrade softhsm-develUpgrade ipa-clientUpgrade tomcatjssUpgrade glassfish-jaxb-apiUpgrade pki-symkey-debuginfoUpgrade ipa-commonUpgrade xmlstreambufferUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade python3-custodiaUpgrade slf4j-jdk14Upgrade pki-servlet-engineUpgrade python3-pkiUpgrade jss-javadocUpgrade ipa-server-dnsUpgrade velocityUpgrade jackson-jaxrs-providersUpgrade ipa-client-commonUpgrade opendnssecUpgrade pki-base-javaUpgrade ipa-serverUpgrade ldapjdk-javadocUpgrade ipa-debuginfoUpgrade ldapjdkUpgrade resteasyUpgrade ipa-server-trust-adUpgrade glassfish-fastinfosetUpgrade pki-tools-debuginfoUpgrade python3-ipaserverUpgrade python3-yubicoUpgrade slapi-nisUpgrade apache-commons-langUpgrade ipa-server-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade bea-stax-apiUpgrade glassfish-jaxb-coreUpgrade jakarta-commons-httpclientUpgrade softhsm | Oct 1, 2020 | Apr 20, 2019 |
| Rocky_linux | — | Upgrade pcsUpgrade python-nss-docUpgrade python3-nssUpgrade pcs-snmpUpgrade python3-nss-debuginfoUpgrade python-nss-debugsource | Mar 12, 2024 | Apr 20, 2019 |
| Suse | — | Upgrade python3-django | Aug 9, 2019 | Apr 19, 2019 |
| Ubuntu | — | Upgrade libjs-jquery (Ubuntu Pro) | Jun 26, 2025 | Apr 20, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub