After three years of silence, a new jQuery prototype pollution vulnerability emerges once again
7y agoen
Source
SnykAfter three years of silence, a new jQuery prototype pollution vulnerability emerges once againsnyk.ioOn March 26th, 2019, almost three years after the last jQuery security vulnerability was disclosed, we recently learned about a new security vulnerability affecting the same popular jQuery frontend library.
You might also wanna read
WAF - WAF Release - 2025-11-10
Cloudflare·8mo ago
Researcher Discovers Critical React2Shell RCE Vulnerability (CVE-2025-55182) Affecting Millions of Websites
A security researcher recounts discovering a critical remote code execution vulnerability (CVE-2025-55182, dubbed "React2Shell") in the Reac
lachlan.nz·2mo ago
25-Year-Old curl Vulnerability (CVE-2026-8932) Patched in Record 18-CVE Security Release
A critical 25-year-old security vulnerability (CVE-2026-8932) in curl, dating back to version 7.7 from March 2001, has been patched as part
cybersecuritynews.com·13d ago)
Node.js 26.0.0 Released with Temporal API, V8 14.6, and Undici 8.0
Node.js 26.0.0 has been released as the "Current" version, featuring the Temporal API enabled by default, V8 engine update to 14.6, Undici u
nodejs.org·1mo ago
Google patches fifth Chrome zero-day of 2026 exploited in the wild
Google patched CVE-2026-11645, the fifth actively exploited Chrome zero-day of 2026, an out-of-bounds memory access vulnerability in the V8
briefly.co·29d ago
JavaScript Community Faces Reckoning After Major Supply-Chain Attack
The article discusses the aftermath of the largest supply-chain attack in JavaScript history, suggesting this could be a pivotal moment for
drewdevault.com·9mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.