Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
components/jquery
master @ 594f9dd
2
Fixes
11
CVEs
HIGH
Peak severity
Highlights
Prototype Pollution: 1 prior fix. Scrutinize any change in this area.
jQuery: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Reflected XSS: HTML parsing and DOM manipulation helper functions (such as htmlPrefilter) are highly susceptible to bypasses in self-closing tag processing and sanitization logic, letting attackers inject and execute arbitrary scripts through standard DOM methods.
Prototype Pollution: The deep-copy logic in object extend utilities historically failed to validate and block modifications targeting the '__proto__' key, enabling remote attackers to pollute the global Object prototype and achieve remote code execution or application denial of service.