Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-41182

Fixed in a distro release EPSS 39%CVSS 6.5

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

Published 2021-10-26 · CVE record · OSV

Products: jquery-ui

Fixed upstream

EcosystemPackageFixed in
Mavenorg.webjars.npm:jquery-ui1.13.0
NuGetjQuery.UI.Combined1.13.0
RubyGemsjquery-ui-rails7.0.0
npmjquery-ui1.13.0

Distro releases

ReleasePackageFixed in
Debian:10jqueryui1.12.1+dfsg-5+deb10u1
Debian:10otrs26.0.16-2+deb10u1
Debian:12jqueryui1.13.0+dfsg-1
Debian:13jqueryui1.13.0+dfsg-1
Debian:14jqueryui1.13.0+dfsg-1
Debian:9drupal77.52-2+deb9u17
Red Hat:rhev_manager:4.4:el8ovirt-engine0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-backend0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-dbscripts0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-health-check-bundler0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-restapi0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-base0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-cinderlib0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-imageio0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-ovirt-engine0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-ovirt-engine-common0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-vmconsole-proxy-helper0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-setup-plugin-websocket-proxy0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-tools0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-tools-backup0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-ui-extensions0:1.3.3-1.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-vmconsole-proxy-helper0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-webadmin-portal0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-engine-websocket-proxy0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8ovirt-web-ui0:1.8.1-2.el8ev
Red Hat:rhev_manager:4.4:el8python3-ovirt-engine-lib0:4.5.0.7-0.9.el8ev
Red Hat:rhev_manager:4.4:el8rhvm0:4.5.0.7-0.9.el8ev
SUSE:OpenStack Cloud 9ardana-barbican9.0+git.1644879908.8a641c1-3.13.1
SUSE:OpenStack Cloud 9grafana6.7.4-3.26.1
SUSE:OpenStack Cloud 9openstack-barbican7.0.1~dev24-3.14.1
SUSE:OpenStack Cloud 9openstack-cinder13.0.10~dev24-3.34.2
SUSE:OpenStack Cloud 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE:OpenStack Cloud 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE:OpenStack Cloud 9openstack-ironic11.1.5~dev18-3.28.2
SUSE:OpenStack Cloud 9openstack-keystone14.2.1~dev9-3.28.2
SUSE:OpenStack Cloud 9openstack-neutron13.0.8~dev206-3.40.1
SUSE:OpenStack Cloud 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE:OpenStack Cloud 9python-Pillow5.2.0-3.17.1
SUSE:OpenStack Cloud 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE:OpenStack Cloud 9python-lxml4.2.4-3.3.1
SUSE:OpenStack Cloud 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE:OpenStack Cloud 9venv-openstack-barbican7.0.1~dev24-3.35.2
SUSE:OpenStack Cloud 9venv-openstack-cinder13.0.10~dev24-3.38.1
SUSE:OpenStack Cloud 9venv-openstack-designate7.0.2~dev2-3.35.1
SUSE:OpenStack Cloud 9venv-openstack-glance17.0.1~dev30-3.33.1
SUSE:OpenStack Cloud 9venv-openstack-heat11.0.4~dev4-3.35.1
SUSE:OpenStack Cloud 9venv-openstack-horizon14.1.1~dev11-4.39.1
SUSE:OpenStack Cloud 9venv-openstack-ironic11.1.5~dev18-4.33.1
SUSE:OpenStack Cloud 9venv-openstack-keystone14.2.1~dev9-3.36.1
SUSE:OpenStack Cloud 9venv-openstack-magnum7.2.1~dev1-4.35.1
SUSE:OpenStack Cloud 9venv-openstack-manila7.4.2~dev60-3.41.1
SUSE:OpenStack Cloud 9venv-openstack-monasca2.7.1~dev10-3.37.1
SUSE:OpenStack Cloud 9venv-openstack-monasca-ceilometer1.8.2~dev3-3.35.1
SUSE:OpenStack Cloud 9venv-openstack-neutron13.0.8~dev206-6.39.1
SUSE:OpenStack Cloud 9venv-openstack-nova18.3.1~dev91-3.39.1
SUSE:OpenStack Cloud 9venv-openstack-octavia3.2.3~dev7-4.35.1
SUSE:OpenStack Cloud 9venv-openstack-sahara9.0.2~dev15-3.35.1
SUSE:OpenStack Cloud 9venv-openstack-swift2.19.2~dev48-2.30.1
SUSE:OpenStack Cloud Crowbar 9grafana6.7.4-3.26.1
SUSE:OpenStack Cloud Crowbar 9openstack-barbican7.0.1~dev24-3.14.1
SUSE:OpenStack Cloud Crowbar 9openstack-cinder13.0.10~dev24-3.34.2
SUSE:OpenStack Cloud Crowbar 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE:OpenStack Cloud Crowbar 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE:OpenStack Cloud Crowbar 9openstack-ironic11.1.5~dev18-3.28.2
SUSE:OpenStack Cloud Crowbar 9openstack-keystone14.2.1~dev9-3.28.2
SUSE:OpenStack Cloud Crowbar 9openstack-neutron13.0.8~dev206-3.40.1
SUSE:OpenStack Cloud Crowbar 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE:OpenStack Cloud Crowbar 9python-Pillow5.2.0-3.17.1
SUSE:OpenStack Cloud Crowbar 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE:OpenStack Cloud Crowbar 9python-lxml4.2.4-3.3.1
SUSE:OpenStack Cloud Crowbar 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE:OpenStack Cloud Crowbar 9rubygem-sinatra1.4.6-4.3.1
Ubuntu:20.04:LTSjqueryui1.12.1+dfsg-5ubuntu0.20.04.1
Ubuntu:Pro:14.04:LTSjqueryui1.10.1+dfsg-1ubuntu0.14.04.1~esm1
Ubuntu:Pro:16.04:LTSjqueryui1.10.1+dfsg-1ubuntu0.16.04.1~esm1
Ubuntu:Pro:18.04:LTSjqueryui1.12.1+dfsg-5ubuntu0.18.04.1~esm3