{"id":"DRUPAL-CONTRIB-2022-004","aliases":[],"title":"jQuery UI is a third-party library used by Drupal.","titleSource":"OSV","descriptionSource":"OSV","description":"jQuery UI is a third-party library used by Drupal. The jQuery UI Datepicker module provides the jQuery UI Datepicker library, which is not included in Drupal 9 core.\n\njQuery UI was previously thought to be end-of-life.\n\nLate in 2021, jQuery UI announced that they would be continuing development, and released a [jQuery UI 1.13.0](https://blog.jqueryui.com/2021/10/jquery-ui-1-13-0-released/) version. As part of this 1.13.0 update, they disclosed the following security issues that may affect site using the jQuery UI Datepicker module:\n\n* CVE-2021-41182: [XSS in the altField option of the Datepicker widget](https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc)\n* CVE-2021-41183: [XSS in \\*Text options of the Datepicker widget](https://github.com/jquery/jquery-ui/security/advisories/GHSA-j7qv-pgf6-hvh4)","severity":"unknown","score":null,"published":"2022-01-19T15:33:50.000Z","modified":"2026-09-10T03:45:56.885Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/jquery_ui_datepicker","sources":[{"name":"OSV · DRUPAL-CONTRIB-2022-004","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2022-004"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.0"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<1.2.0"}}],"versions":[],"fixed":["1.2.0"]}],"sourceAffected":[],"references":["https://www.drupal.org/sa-contrib-2022-004"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2022-004","modified":"2026-09-10T03:45:56.885456749Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2022-004"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T09:10:39.623Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}