Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-41184

Fixed in a distro release EPSS 41%CVSS 6.5

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.

Published 2021-10-26 · CVE record · OSV

Products: jquery-ui

Fixed upstream

EcosystemPackageFixed in
Mavenorg.webjars.npm:jquery-ui1.13.0
NuGetjQuery.UI.Combined1.13.0
RubyGemsjquery-ui-rails7.0.0
npmjquery-ui1.13.0

Distro releases

ReleasePackageFixed in
Debian 10jqueryui1.12.1+dfsg-5+deb10u1
Debian 10otrs26.0.16-2+deb10u1
Debian 12jqueryui1.13.0+dfsg-1
Debian 13jqueryui1.13.0+dfsg-1
Debian 14jqueryui1.13.0+dfsg-1
Red Hat rhev manager 4.4 el8ovirt-engine0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-backend0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-dbscripts0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-health-check-bundler0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-restapi0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-base0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-cinderlib0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-imageio0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-ovirt-engine0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-ovirt-engine-common0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-vmconsole-proxy-helper0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-setup-plugin-websocket-proxy0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-tools0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-tools-backup0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-ui-extensions0:1.3.3-1.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-vmconsole-proxy-helper0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-webadmin-portal0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-engine-websocket-proxy0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8ovirt-web-ui0:1.8.1-2.el8ev
Red Hat rhev manager 4.4 el8python3-ovirt-engine-lib0:4.5.0.7-0.9.el8ev
Red Hat rhev manager 4.4 el8rhvm0:4.5.0.7-0.9.el8ev
SUSE OpenStack Cloud 9ardana-barbican9.0+git.1644879908.8a641c1-3.13.1
SUSE OpenStack Cloud 9grafana6.7.4-3.26.1
SUSE OpenStack Cloud 9openstack-barbican7.0.1~dev24-3.14.1
SUSE OpenStack Cloud 9openstack-cinder13.0.10~dev24-3.34.2
SUSE OpenStack Cloud 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE OpenStack Cloud 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE OpenStack Cloud 9openstack-ironic11.1.5~dev18-3.28.2
SUSE OpenStack Cloud 9openstack-keystone14.2.1~dev9-3.28.2
SUSE OpenStack Cloud 9openstack-neutron13.0.8~dev206-3.40.1
SUSE OpenStack Cloud 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE OpenStack Cloud 9python-Pillow5.2.0-3.17.1
SUSE OpenStack Cloud 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE OpenStack Cloud 9python-lxml4.2.4-3.3.1
SUSE OpenStack Cloud 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE OpenStack Cloud 9venv-openstack-barbican7.0.1~dev24-3.35.2
SUSE OpenStack Cloud 9venv-openstack-cinder13.0.10~dev24-3.38.1
SUSE OpenStack Cloud 9venv-openstack-designate7.0.2~dev2-3.35.1
SUSE OpenStack Cloud 9venv-openstack-glance17.0.1~dev30-3.33.1
SUSE OpenStack Cloud 9venv-openstack-heat11.0.4~dev4-3.35.1
SUSE OpenStack Cloud 9venv-openstack-horizon14.1.1~dev11-4.39.1
SUSE OpenStack Cloud 9venv-openstack-ironic11.1.5~dev18-4.33.1
SUSE OpenStack Cloud 9venv-openstack-keystone14.2.1~dev9-3.36.1
SUSE OpenStack Cloud 9venv-openstack-magnum7.2.1~dev1-4.35.1
SUSE OpenStack Cloud 9venv-openstack-manila7.4.2~dev60-3.41.1
SUSE OpenStack Cloud 9venv-openstack-monasca2.7.1~dev10-3.37.1
SUSE OpenStack Cloud 9venv-openstack-monasca-ceilometer1.8.2~dev3-3.35.1
SUSE OpenStack Cloud 9venv-openstack-neutron13.0.8~dev206-6.39.1
SUSE OpenStack Cloud 9venv-openstack-nova18.3.1~dev91-3.39.1
SUSE OpenStack Cloud 9venv-openstack-octavia3.2.3~dev7-4.35.1
SUSE OpenStack Cloud 9venv-openstack-sahara9.0.2~dev15-3.35.1
SUSE OpenStack Cloud 9venv-openstack-swift2.19.2~dev48-2.30.1
SUSE OpenStack Cloud Crowbar 9grafana6.7.4-3.26.1
SUSE OpenStack Cloud Crowbar 9openstack-barbican7.0.1~dev24-3.14.1
SUSE OpenStack Cloud Crowbar 9openstack-cinder13.0.10~dev24-3.34.2
SUSE OpenStack Cloud Crowbar 9openstack-heat-gbp14.0.1~dev4-3.9.1
SUSE OpenStack Cloud Crowbar 9openstack-horizon-plugin-gbp-ui14.0.1~dev3-3.9.1
SUSE OpenStack Cloud Crowbar 9openstack-ironic11.1.5~dev18-3.28.2
SUSE OpenStack Cloud Crowbar 9openstack-keystone14.2.1~dev9-3.28.2
SUSE OpenStack Cloud Crowbar 9openstack-neutron13.0.8~dev206-3.40.1
SUSE OpenStack Cloud Crowbar 9openstack-neutron-gbp14.0.1~dev33-3.31.1
SUSE OpenStack Cloud Crowbar 9python-Pillow5.2.0-3.17.1
SUSE OpenStack Cloud Crowbar 9python-XStatic-jquery-ui1.13.0.1-4.3.1
SUSE OpenStack Cloud Crowbar 9python-lxml4.2.4-3.3.1
SUSE OpenStack Cloud Crowbar 9release-notes-suse-openstack-cloud9.20220413-3.30.1
SUSE OpenStack Cloud Crowbar 9rubygem-sinatra1.4.6-4.3.1
Ubuntu 20.04 LTSjqueryui1.12.1+dfsg-5ubuntu0.20.04.1
Ubuntu Pro 14.04 LTSjqueryui1.10.1+dfsg-1ubuntu0.14.04.1~esm1
Ubuntu Pro 16.04 LTSjqueryui1.10.1+dfsg-1ubuntu0.16.04.1~esm1
Ubuntu Pro 18.04 LTSjqueryui1.12.1+dfsg-5ubuntu0.18.04.1~esm2
Ubuntu Pro 18.04 LTSjqueryui1.12.1+dfsg-5ubuntu0.18.04.1~esm3
Ubuntu Pro 20.04 LTSjqueryui1.12.1+dfsg-5ubuntu0.20.04.1~esm3
Ubuntu Pro 22.04 LTSjqueryui1.13.1+dfsg-1ubuntu0.1~esm1