First published: Wed Dec 16 2020(Updated: )
python-XStatic-jQuery is the jQuery javascript library packaged for<br>Python's setuptools<br>Security Fix(es):<br><li> Prototype pollution in object's prototype leading to denial of service</li> remote code execution or property injection (CVE-2019-11358)<br>For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE<br>page listed in the References section.
Affected Software | Affected Version | How to fix |
---|
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:5581 is classified as moderate.
To fix RHSA-2020:5581, update the python-XStatic-jQuery package to a fixed version that addresses the vulnerability.
RHSA-2020:5581 is associated with prototype pollution which may lead to denial of service, remote code execution, or property injection.
CVE-2019-11358 is the specific vulnerability in python-XStatic-jQuery that allows for prototype pollution.
RHSA-2020:5581 affects the python-XStatic-jQuery library packaged for Python's setuptools.