CVE catalog

CVE-2022-23395

jquery-goodies: CVE-2022-23395

Severity: Medium · CVSS 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published: Mar 2, 2022, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.14% · Oct 27, 2026

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	jquery-goodies	sid	`12-4`	vulnerable
Debian	jquery-goodies	forky	`12-4`	vulnerable
Debian	jquery-goodies	trixie	`12-4`	vulnerable
Debian	jquery-goodies	bookworm	`12-4`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	jquery-goodies	source	sid	`(unfixed)`	unimportant	Not reported	Not reported
Debian	jquery-goodies	source	forky	`(unfixed)`	unimportant	Not reported	Not reported
Debian	jquery-goodies	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	jquery-goodies	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libjs-jquery-cookie]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-countdown]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-easing]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-event-drag]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-event-drop]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-fancybox]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-form]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-fullscreen]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-galleriffic]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-history]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-jfeed]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-jush]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-livequery]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-meiomask]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-metadata]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-opacityrollover]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-resize]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-resize-doc]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-slides]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
[libjs-jquery-tipsy]Affected
Source package: [jquery-goodies]
Details (2)
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm
- 12-4 · all · bookworm
  Affected
  dsa · jquery-goodies · debian · bookworm

Next results

Observed: Oct 23, 2026, 6:24:40 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [Red Hat security advisories and VEX]