StackRadar

CVE-2019-11358

Medium

Advisory

Published 20 Apr 2019In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.872
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
4 of 4
affected packages

XSS in jQuery as used in Drupal, Backdrop CMS, and other products

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
jquerydeb1.7.2+dfsg-3.2, 1.11.3+dfsg-4, 3.2.1-11.7.2+dfsg-3.2+deb8u6, 1.11.3+dfsg-4ubuntu0.1~esm1, 3.2.1-1ubuntu0.1~esm116
jquerynpm1.9.1, 1.10.2, 2.0.0pre, 2.2.1+2 more3.4.07
maximebf/debugbarcomposerv1.11.1, v1.15.1, v1.18.0, v1.18.21.19.04
jquery-railsgem4.2.24.3.41
OSV records
GHSA-6c3j-c64m-qhgqUBUNTU-CVE-2019-11358DLA-1777-1
Also known as
DRUPAL-CORE-2019-006, PYSEC-2026-628, SNYK-JS-JQUERY-174006, USN-7622-1

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
maximebf/debugbar@v1.18.0
1.19.0

Open the chart page →

18,509
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jquery@1.9.1
3.4.0

Open the chart page →

5,209
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
jquery-rails@4.2.2
4.3.4

Open the chart page →

18,137
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
jquery@2.0.0pre
3.4.0

Open the chart page →

3,437
trifidappuio2.0.21 of 1See more

trifid appuio 2.0.2

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
zazuko/trifid:2.3.7054be137de70
jquery@2.2.4
3.4.0

Open the chart page →

2,783
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jquery@1.9.1
3.4.0

Open the chart page →

18,277
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.01 of 3See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

11,833
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
jquery@3.3.1
3.4.0

Open the chart page →

29,901
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1

Open the chart page →

27,417
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

4,086
webpagetest-servercloudnativeapp0.2.11 of 1See more

webpagetest-server cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
timothyclarke/wptserver:2018-03-0840a80ced8031
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,716
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
jquery@1.9.1
3.4.0

Open the chart page →

5,209
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
jquery@3.2.1-1
3.2.1-1ubuntu0.1~esm1

Open the chart page →

27,728
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,186
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,245
grocygeek-cookbookVerified publisher8.5.21 of 1See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
linuxserver/grocy:version-v3.1.3291296e66c2a
jquery@3.3.1
3.4.0

Open the chart page →

1,043
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
maximebf/debugbar@v1.15.1
1.19.0

Open the chart page →

5,332
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
maximebf/debugbar@v1.18.2
1.19.0

Open the chart page →

12,813
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1

Open the chart page →

38,865
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
jquery@3.2.1-1
3.2.1-1ubuntu0.1~esm1

Open the chart page →

36,215
podcast-helmpodcastwala-helm0.1.01 of 2See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
shivani446/podcastwala-php:v1c0d07b7b4c8d
maximebf/debugbar@v1.11.1
1.19.0

Open the chart page →

621
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
jquery@2.2.1
3.4.0

Open the chart page →

5,215
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6

Open the chart page →

3,116
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2019-11358.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
jquery@1.10.2
3.4.0

Open the chart page →

3,827

Container images carrying it

28 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
jquery@1.9.1
3.4.0
3
akaunting/akaunting:3.0.1552811b36ec3a
maximebf/debugbar@v1.18.2
1.19.0
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
daskdev/dask-notebook:1.1.0052630f5ca04
jquery@3.3.1
3.4.0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
gristlabs/grist:0.7.96e71b1914a7e
jquery@2.2.1
3.4.0
1
hickey/puppet_forge:1.10.0c1148a09ef20
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
jquery-rails@4.2.2
4.3.4
1
linuxserver/grocy:version-v3.1.3291296e66c2a
jquery@3.3.1
3.4.0
1
muluder/prograncontrollermcord:0.1.843b597a93da7
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1
1
neilpeterson/get-tweet:v28b645ac1a23e
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
neilpeterson/osba-storage-demo:latest29d229ab446e
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
omecproject/onos-progran:1.0.05715e5648aa0
jquery@1.11.3+dfsg-4
1.11.3+dfsg-4ubuntu0.1~esm1
1
opendatacube/wms:latest1b90cdf68831
jquery@3.2.1-1
3.2.1-1ubuntu0.1~esm1
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
jquery@2.0.0pre
3.4.0
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
jquery@3.2.1-1
3.2.1-1ubuntu0.1~esm1
1
shivani446/podcastwala-php:v1c0d07b7b4c8d
maximebf/debugbar@v1.11.1
1.19.0
1
snipe/snipe-it:v6.0.1455fb7636a98c
maximebf/debugbar@v1.18.0
1.19.0
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
timothyclarke/wptserver:2018-03-0840a80ced8031
jquery@1.7.2+dfsg-3.2
1.7.2+dfsg-3.2+deb8u6
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
maximebf/debugbar@v1.15.1
1.19.0
1
zazuko/trifid:2.3.7054be137de70
jquery@2.2.4
3.4.0
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
jquery@1.10.2
3.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.