{"id":"CVE-2022-23395","details":"jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting (XSS).","aliases":["GHSA-gcx5-3p5f-f8vp"],"modified":"2026-08-12T03:51:46.319861110Z","published":"2022-03-02T11:16:55Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23395.json"},"references":[{"type":"WEB","url":"https://snyk.io/test/npm/jquery.cookie/1.4.1?tab=issues"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23395.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23395"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220325-0008/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/carhartl/jquery-cookie","events":[{"introduced":"7f88a4e631aba8a8c688fd8999ce6b9bcfd50718"},{"last_affected":"7f88a4e631aba8a8c688fd8999ce6b9bcfd50718"}],"database_specific":{"extracted_events":[{"introduced":"1.4.1"},{"last_affected":"1.4.1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:jquery.cookie_project:jquery.cookie:1.4.1:*:*:*:*:node.js:*:*"}}],"versions":["1.4.1","v1.4.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23395.json"}}],"schema_version":"1.9.0"}