jquery-ui is vulnerable to cross-site scripting attacks. The vulnerability exists in the widget
function in checkboxradio.js
due to a lack of input sanitization which allows a malicious attacker to inject and execute malicious javascript.
blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released/
github.com/advisories/GHSA-h6gj-6jjq-h8g9
github.com/jquery/jquery-ui/commit/8cc5bae1caa1fcf96bf5862c5646c787020ba3f9
github.com/jquery/jquery-ui/issues/2101
github.com/jquery/jquery-ui/security/advisories/GHSA-h6gj-6jjq-h8g9
lists.debian.org/debian-lts-announce/2022/12/msg00015.html
lists.fedoraproject.org/archives/list/[email protected]/message/6XBR3G3JR5ZIOJDO4224M3INXDS2VFDD/
lists.fedoraproject.org/archives/list/[email protected]/message/J5LGNTICB5BRFAG3DHVVELS6H3CZSQMO/
lists.fedoraproject.org/archives/list/[email protected]/message/QB2FJQXCNHO32VGVOC6DY6IPGVE4VDU6/
security.netapp.com/advisory/ntap-20220909-0007/
www.drupal.org/sa-contrib-2022-052