Sign in

jQuery 1.3.x NES Release Notes

1.3.3 -June 11, 2024

Notes

  • This release originates from an open-source jQuery repository forked by HeroDevs. It encompasses modifications and further security updates implemented by HeroDevs to ensure successful building.

Full Version: 1.3.2-jquery-1.3.3

Bug Fixes

  • Removed doc references to outdated and now malicious site (BDSA-2021-3651)

  • Prevent passing of HTML from untrusted sources

    • This fixes a Moderate Severity Potential XSS vulnerability (CVE-2020-11023)
  • Prevent Object.prototype pollution
    • This fixes a Moderate Severity Potential XSS vulnerability (CVE-2020-7656)
  • Prevent passing of HTML from untrusted sources 
    • This fixes a Moderate Severity Potential XSS vulnerability (CVE-2020-11022)
  • Prevent Object.prototype pollution
    • This fixes a Moderate Severity XSS in jQuery vulnerability (CVE-2019-11358)
  • Avoid XSS via location.hash
    • This fixes a Moderate Severity XSS in jQuery vulnerability (CVE-2012-6708)
  • Avoid XSS via location.hash
    • This fixes a Moderate Severity XSS in jQuery vulnerability (CVE-2011-4969)
  • Prevent auto-execution of scripts when no explicit dataType was provided
    • This fixes a Moderate Severity Cross-Site Scripting (XSS) vulnerability (CVE-2015-9251)