CVE-2020-11022 | jQuery has a potential XSS vulnerability

Exp

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

Published: 2020-04-29 Last update: 2026-04-13 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2020-11022 is rated High Exploit Risk (72.4/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 2.39%). 2 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2020-11022

EDB-ID Source Kind Published Link
49766 exploit_db edb 2021-04-14 Exploit-DB ↗
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2020-11022

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-09 2.46% 2.39% -0.06%
2 2026-05-22 2.39% 2.46% +0.06%
3 2026-05-12 — 2.39% —

Full EPSS history (90 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2020-11022

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.9 3.1 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:H)
Even with access, the exploit needs extra luck, timing, or a fussy environment to actually work.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:R)
A real person has to do something—click, install, enable—otherwise it doesn’t land.
Scope (S:C)
Breaking this can reach past the original component and bite other resources—bigger blast radius.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:L)
Attackers could change some data, but it’s limited—not everything goes.
Availability (A:N)
Service keeps running; no real outage angle.
 1.6 4.7 [email protected]
6.1 3.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:R)
A real person has to do something—click, install, enable—otherwise it doesn’t land.
Scope (S:C)
Breaking this can reach past the original component and bite other resources—bigger blast radius.
Confidentiality (C:L)
Some sensitive info could get out, but not a total data dump.
Integrity (I:L)
Attackers could change some data, but it’s limited—not everything goes.
Availability (A:N)
Service keeps running; no real outage angle.
 2.8 2.7 [email protected]
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
 8.6 2.9 [email protected]

Weakness enumeration for CVE-2020-11022

GitHub Security Advisory for CVE-2020-11022

GHSA-gxr4-xjj5-5px2 · Severity: medium · Ecosystem: rubygems — Potential XSS vulnerability in jQuery

OS Trackers for CVE-2020-11022

vendor priority summary link
alpine — CVE-2020-11022: 2 source package rows (cacti, drupal7); 12 state rows across 7 repos (3.17-community, 3.18-community, 3.19-community, 3.20-community, 3.21-community, 3.22-community, edge-community); fixed 12, open 0. https://security.alpinelinux.org/vuln/CVE-2020-11022
debian not yet assigned CVE-2020-11022 not yet assigned priority: Debian including 2 source packages (node-jquery, otrs2), 6 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 6. https://security-tracker.debian.org/tracker/CVE-2020-11022
gentoo normal CVE-2020-11022: 1 GLSA(s) (202007-03), 2 atom(s) (net-analyzer/cacti, net-analyzer/cacti-spine); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2020-11022
redhat medium — https://access.redhat.com/security/cve/CVE-2020-11022
suse medium CVE-2020-11022 severity moderate: SUSE including 247 source package names (3.3.2-2.3:testng-7.4.0-150200.3.4.3, amazon/suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64, …), 366 product×package rows across 51 product lines (Container containers/apache-pulsar, HPE Helion OpenStack 8, … (51 product lines)): Known Affected 231, Known Not Affected 91, Fixed 44. https://www.suse.com/security/cve/CVE-2020-11022/
ubuntu low CVE-2020-11022 low priority: Ubuntu including 2 source packages (drupal7, jquery), 31 status rows across 16 suites (bionic, eoan, focal, groovy, hirsute, impish, jammy, kinetic, lunar, mantic, noble, oracular, plucky, trusty, upstream, xenial): DNE 22, released 5, needs-triage 2, ignored 1, not-affected 1. https://ubuntu.com/security/CVE-2020-11022

Affected software / configurations for CVE-2020-11022

Vendor Product Version Raw CPE
jquery jquery >= 1.2, < 3.5.0 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*
drupal drupal >= 7.0, < 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
drupal drupal >= 8.7.0, < 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
drupal drupal >= 8.8.0, < 8.8.6 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
debian debian_linux 9.0 cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
fedoraproject fedora 31 cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
fedoraproject fedora 32 cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
fedoraproject fedora 33 cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
oracle agile_product_lifecycle_management_for_process 6.2.0.0 cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*
oracle application_testing_suite 13.3.0.1 cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*
oracle banking_digital_experience 18.1 cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*
oracle banking_digital_experience 18.2 cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:*
oracle banking_digital_experience 18.3 cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*
oracle banking_digital_experience 19.1 cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*
oracle banking_digital_experience 19.2 cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*
oracle banking_digital_experience 20.1 cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*
oracle blockchain_platform < 21.1.2 cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*
oracle communications_application_session_controller 3.8m0 cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:*
oracle communications_billing_and_revenue_management 7.5.0.23.0 cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:*
oracle communications_billing_and_revenue_management 12.0.0.3.0 cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
oracle communications_diameter_signaling_router_idih: >= 8.0.0, <= 8.2.2 cpe:2.3:a:oracle:communications_diameter_signaling_router_idih\::*:*:*:*:*:*:*:*
oracle communications_eagle_application_processor >= 16.1.0, <= 16.4.0 cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*
oracle communications_services_gatekeeper 7.0 cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*
oracle communications_webrtc_session_controller 7.2 cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:*
oracle enterprise_manager_ops_center 12.4.0.0 cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
oracle enterprise_session_border_controller 8.4 cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*
oracle financial_services_analytical_applications_infrastructure >= 8.0.6.0.0, <= 8.1.0.0.0 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
oracle financial_services_analytical_applications_reconciliation_framework >= 8.0.6, <= 8.0.8 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:*
oracle financial_services_analytical_applications_reconciliation_framework 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:*
oracle financial_services_asset_liability_management 8.0.6 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.6:*:*:*:*:*:*:*
oracle financial_services_asset_liability_management 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.7:*:*:*:*:*:*:*
oracle financial_services_asset_liability_management 8.1.0 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:*
oracle financial_services_balance_sheet_planning 8.0.8 cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:*
oracle financial_services_basel_regulatory_capital_basic >= 8.0.6, <= 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:*
oracle financial_services_basel_regulatory_capital_basic 8.1.0 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:*
oracle financial_services_basel_regulatory_capital_internal_ratings_based_approach >= 8.0.6, <= 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:*
oracle financial_services_basel_regulatory_capital_internal_ratings_based_approach 8.1.0 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:*
oracle financial_services_data_foundation >= 8.0.6, <= 8.1.0 cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:*
oracle financial_services_data_governance_for_us_regulatory_reporting >= 8.0.6, <= 8.0.9 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:*
oracle financial_services_data_integration_hub 8.0.6 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6:*:*:*:*:*:*:*
oracle financial_services_data_integration_hub 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.7:*:*:*:*:*:*:*
oracle financial_services_data_integration_hub 8.1.0 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:*
oracle financial_services_funds_transfer_pricing 8.0.6 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.6:*:*:*:*:*:*:*
oracle financial_services_funds_transfer_pricing 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.7:*:*:*:*:*:*:*
oracle financial_services_funds_transfer_pricing 8.1.0 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:*
oracle financial_services_hedge_management_and_ifrs_valuations >= 8.0.6, <= 8.0.8 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:*
oracle financial_services_hedge_management_and_ifrs_valuations 8.1.0 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:*
oracle financial_services_institutional_performance_analytics 8.0.6 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:*
oracle financial_services_institutional_performance_analytics 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:*
oracle financial_services_institutional_performance_analytics 8.1.0 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:*
oracle financial_services_liquidity_risk_management 8.0.6 cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:*
oracle financial_services_liquidity_risk_measurement_and_management 8.0.7 cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:*
oracle financial_services_liquidity_risk_measurement_and_management 8.0.8 cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*
oracle financial_services_liquidity_risk_measurement_and_management 8.1.0 cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:*
oracle financial_services_loan_loss_forecasting_and_provisioning >= 8.0.6, <= 8.0.8 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:*
oracle financial_services_loan_loss_forecasting_and_provisioning 8.1.0 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:*
oracle financial_services_market_risk_measurement_and_management 8.0.6 cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*
oracle financial_services_market_risk_measurement_and_management 8.0.8 cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:*
oracle financial_services_price_creation_and_discovery 8.0.6 cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:*
oracle financial_services_price_creation_and_discovery 8.0.7 cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:*
oracle financial_services_profitability_management 8.0.6 cpe:2.3:a:oracle:financial_services_profitability_management:8.0.6:*:*:*:*:*:*:*
oracle financial_services_profitability_management 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.0.7:*:*:*:*:*:*:*
oracle financial_services_profitability_management 8.1.0 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:*
oracle financial_services_regulatory_reporting_for_european_banking_authority >= 8.0.6, <= 8.1.0 cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:*:*:*:*:*:*:*:*
oracle financial_services_regulatory_reporting_for_us_federal_reserve >= 8.0.6, <= 8.0.9 cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:*
oracle healthcare_foundation 7.1.1 cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:*
oracle healthcare_foundation 7.2.0 cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:*
oracle healthcare_foundation 7.2.1 cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:*
oracle healthcare_foundation 7.3.0 cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*
oracle hospitality_materials_control 18.1 cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:*
oracle hospitality_simphony >= 19.1.0, <= 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:*
oracle hospitality_simphony 18.1 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:*
oracle hospitality_simphony 18.2 cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:*
oracle insurance_accounting_analyzer 8.0.9 cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:*
oracle insurance_allocation_manager_for_enterprise_profitability 8.0.8 cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:*
oracle insurance_allocation_manager_for_enterprise_profitability 8.1.0 cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:*
oracle insurance_data_foundation >= 8.0.6, <= 8.1.0 cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:*
oracle insurance_insbridge_rating_and_underwriting >= 5.0.0.0, <= 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:*
oracle insurance_insbridge_rating_and_underwriting 5.6.1.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:*
oracle jdeveloper 11.1.1.9.0 cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*

References for CVE-2020-11022

URL Tags
http://security.netapp.com/advisory/ntap-20200511-0006
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released
https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77 Patch Third Party Advisory
https://github.com/jquery/jquery/releases/tag/3.5.0
https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2 Mitigation Third Party Advisory
https://github.com/maximebf/php-debugbar/commit/847216e60544258c881f2733d699bbcfeefac0fc
https://github.com/maximebf/php-debugbar/issues/447
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2020-11022.yml
https://jquery.com/upgrade-guide/3.5
https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3Cissues.flink.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
https://lists.fedoraproject.org/archives/list/[email protected]/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY
https://lists.fedoraproject.org/archives/list/[email protected]/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K
https://lists.fedoraproject.org/archives/list/[email protected]/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4
https://lists.fedoraproject.org/archives/list/[email protected]/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B
https://lists.fedoraproject.org/archives/list/[email protected]/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W
https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html
https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html
https://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html
https://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html
https://security.gentoo.org/glsa/202007-03 Third Party Advisory
https://www.debian.org/security/2020/dsa-4693 Third Party Advisory
https://www.drupal.org/sa-core-2020-002 Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2020.html Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch Third Party Advisory
https://www.tenable.com/security/tns-2020-10 Third Party Advisory
https://www.tenable.com/security/tns-2020-11 Third Party Advisory
https://www.tenable.com/security/tns-2021-02 Third Party Advisory
https://www.tenable.com/security/tns-2021-10 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html Broken Link
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html Broken Link
http://packetstormsecurity.com/files/162159/jQuery-1.2-Cross-Site-Scripting.html Exploit Third Party Advisory VDB Entry
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ Release Notes Vendor Advisory
https://jquery.com/upgrade-guide/3.5/ Mitigation Vendor Advisory
https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133%40%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3Cissues.flink.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOE7P7APPRQKD4FGNHBKJPDY6FFCOH3W/
https://security.netapp.com/advisory/ntap-20200511-0006/ Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
cvelogic Threat Intelligence