Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
jQuery may let attackers run code – update needed
published 2 months ago
Summary
The jQuery library you use contains several security weaknesses that could allow a malicious user to execute unwanted code in visitors’ browsers. TuxCare has released a rebuilt version (1.4.3‑tuxcare.1) that fixes these issues. Apply the updated jQuery package as soon as possible to protect your site.
What to do
- Update timmywil jquery to version 1.4.3-tuxcare.1.
- Update jquery to version 1.4.3-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | timmywil | jquery |
< 1.4.3-tuxcare.1 Fix: upgrade to 1.4.3-tuxcare.1
|
| TuxCare:npm | – | jquery |
< 1.4.3-tuxcare.1 Fix: upgrade to 1.4.3-tuxcare.1
|
Original advisory text
TuxCare security update for jquery (7 CVEs)
TuxCare rebuilt jquery to address 7 CVEs. Fixed in 1.4.3-tuxcare.1.
Timeline
Published28 Aug 2026
Updated15 Sep 2026
First seen28 Aug 2026
Sources
CLSA-2026-1787920316 · OSV
Track software like this
Free during beta