{
  "cveId": "CVE-2021-41184",
  "url": "https://patchblox.com/security/cve/CVE-2021-41184",
  "summary": "CVE-2021-41184 is fixed in 3 products on 1 platform, first by libjs-jquery-ui 1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2, released July 20, 2022. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libjs-jquery-ui: jQuery-UI is the official jQuery user interface library",
  "description": "jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the \u0060of\u0060 option of the \u0060.position()\u0060 util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the \u0060of\u0060 option is now treated as a CSS selector. A workaround is to not accept the value of the \u0060of\u0060 option from untrusted sources.",
  "published": "2021-10-26T08:15:00Z",
  "severity": "Medium",
  "epss": 0.40768,
  "epssPercentile": 0.98664,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libjs-jquery-ui",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "fix": "libjs-jquery-ui 1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjs-jquery-ui-1.12.1-dfsg-5ubuntu0.18.04.1-esm2",
      "released": "2022-07-20T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-jquery-ui",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "fix": "libjs-jquery-ui 1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-jquery-ui-1.12.1-dfsg-5ubuntu0.20.04.1-esm3",
      "released": "2022-07-20T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-jquery-ui-docs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "fix": "libjs-jquery-ui-docs 1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjs-jquery-ui-docs-1.12.1-dfsg-5ubuntu0.18.04.1-esm2",
      "released": "2022-07-20T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libjs-jquery-ui-docs",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "fix": "libjs-jquery-ui-docs 1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libjs-jquery-ui-docs-1.12.1-dfsg-5ubuntu0.20.04.1-esm3",
      "released": "2022-07-20T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "node-jquery-ui",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "fix": "node-jquery-ui 1.12.1\u002Bdfsg-5ubuntu0.18.04.1~esm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-node-jquery-ui-1.12.1-dfsg-5ubuntu0.18.04.1-esm2",
      "released": "2022-07-20T13:15:00Z"
    },
    {
      "platform": "linux",
      "product": "node-jquery-ui",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "fix": "node-jquery-ui 1.12.1\u002Bdfsg-5ubuntu0.20.04.1~esm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-node-jquery-ui-1.12.1-dfsg-5ubuntu0.20.04.1-esm3",
      "released": "2022-07-20T13:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}