StackRadarChart IndexLive demo

CVE-2015-9251

Medium

Advisory

Published 18 Jan 2018In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.297; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 10; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 2; affected packages

Cross-Site Scripting (XSS) in jquery

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
jquerynpm	1.9.1, 1.10.2, 2.0.0pre, 2.2.1+1 more	1.12.2, 3.0.0	5
jquerydeb	1.11.3+dfsg-4	no fix listed	3

OSV records: GHSA-rmxg-73gg-4p98 UBUNTU-CVE-2015-9251

Charts affected

10 by stars

Chart

Latest

Affected images

Radar Score

kongakonga

1 of 1 See more

5,209

openhab-cloudandibraeu

1 of 1 See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
openhab/openhab-cloud :a8138a3	29dd2bac8c4b	jquery@2.0.0pre	3.0.0

Open the chart page →

3,437

trifidappuio

1 of 1 See more

2,783

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	jquery@1.9.1	1.12.2

Open the chart page →

18,277

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	jquery@1.11.3+dfsg-4	no fix listed

Open the chart page →

27,417

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	jquery@1.9.1	1.12.2

Open the chart page →

5,209

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	jquery@1.11.3+dfsg-4	no fix listed

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	jquery@1.11.3+dfsg-4	no fix listed

Open the chart page →

38,865

1 of 1 See more

5,215

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2015-9251.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	jquery@1.10.2	1.12.2

Open the chart page →

3,827

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	jquery@1.9.1	1.12.2	3
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	jquery@1.11.3+dfsg-4	no fix listed	1
gristlabs/grist :0.7.9	6e71b1914a7e	jquery@2.2.1	3.0.0	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	jquery@1.11.3+dfsg-4	no fix listed	1
omecproject/onos-progran :1.0.0	5715e5648aa0	jquery@1.11.3+dfsg-4	no fix listed	1
openhab/openhab-cloud :a8138a3	29dd2bac8c4b	jquery@2.0.0pre	3.0.0	1
zazuko/trifid :2.3.7	054be137de70	jquery@2.2.4	3.0.0	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	jquery@1.10.2	1.12.2	1