[Pkg-javascript-devel] Bug#1085379: jqueryui: CVE-2024-30875

[Paul Gevers]

Control: forwarded -1 https://github.com/jquery/jquery-ui/issues/2305

Hi,

On 18-10-2024 19:09, Moritz Mühlenhoff wrote:
> The only reference is https://github.com/Ant1sec-ops/CVE-2024-30875,
> this was probably never reported upstream.

Apparently somebody did so yesterday. If I read the comment [1] 
correctly, upstream contents the CVE against jqueryui.

[1] https://github.com/jquery/jquery-ui/issues/2305#issuecomment-2428809965

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20241022/ff5560f5/attachment.sig>