org.webjars:jquery-mobile@1.4.3 vulnerabilities

  • latest version

    1.4.5

  • first published

    12 years ago

  • latest version published

    9 years ago

  • licenses detected

  • package manager

  • Direct Vulnerabilities

    Known vulnerabilities in the org.webjars:jquery-mobile package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Cross-site Scripting (XSS)

    org.webjars:jquery-mobile is a touch-optimized web framework for smartphones and Tablets.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS). This is possible because of a lack of validation in the Content-Type header of the XHR response when parsing the AJAX response as HTML.

    How to fix Cross-site Scripting (XSS)?

    A fix was pushed into the master branch but not yet published.

    [,1.5.0-alpha.1]