---
title: Vulnerabilities in Open Source Libraries List
description: The below table shows the list of rules for vulnerabilities in open source libraries that are checked by Quality Clouds. Not all reported vulnerabilities apply to the use of Open Source JavaScript libraries in the specific context of their use in SaaS…
url: "https://community-staging.qualityclouds.com/qcdocs/qc/vulnerabilities-in-open-source-libraries-salesforce/vulnerabilities-in-open-source-libraries-list/"
updated: "2025-03-21"
category: Rules
---

# Vulnerabilities in Open Source Libraries List

The below table shows the list of rules for vulnerabilities in open source libraries that are checked by Quality Clouds.

Not all reported vulnerabilities apply to the use of Open Source JavaScript libraries in the specific context of their use in SaaS platforms, versus their use in the development of stand alone web applications.

The vulnerabilities are only available in full scans - not when running Live Checks or in update set scans. 

| Description | Severity | Area of impact |
| --- | --- | --- |
| [AngularJS - Prototype Pollution Vulnerability under 1.7.9](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-prototype-pollution-vulnerability-under-1-7-9/) | High | Security |
| [AngularJS - XSS vulnerability using AngularJS under 1.6.9 with Firefox](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-using-angularjs-under-1-6-9-with-firefox/) | High | Security |
| [AngularJS - XSS vulnerability through the attribute "usemap" from 1.3.0 to 1.5.0-rc2](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-through-the-attribute-usemap-from-1-3-0-to-1-5-0-rc2/) | High | Security |
| [AngularJS - XSS vulnerability through the attribute "usemap" from 1.0.0 to 1.2.30](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-through-the-attribute-usemap-from-1-0-0-to-1-2-30/) | High | Security |
| [AngularJS - XSS vulnerability using AngularJS under 1.6.5 in Firefox and Safari - sanitize on inert Documents](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-using-angularjs-under-1-6-5-in-firefox-and-safari-sanitize-on-inert-documents/) | High | Security |
| [AngularJS - XSS vulnerability under 1.8.0 - input HTML](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-under-1-8-0-input-html/) | High | Security |
| [AngularJS - Denial of Service attack through DOM clobbering on versions under 1.6.3](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-denial-of-service-attack-through-dom-clobbering-on-versions-under-1-6-3/) | High | Security |
| [jQuery - XSS vulnerability under 3.5.0, when using htmlPrefilter](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-3-5-0-when-using-htmlprefilter/) | High | Security |
| [XSS vulnerability in Ext JS Action Column getTip](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/xss-vulnerability-in-ext-js-action-column-gettip/) | High | Security |
| [jQuery - Prototype Pollution Vulnerability under 3.4.0](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-prototype-pollution-vulnerability-under-3-4-0/) | High | Security |
| [jQuery - XSS vulnerability under 1.6.3, when using location.hash](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-1-6-3-when-using-location-hash/) | High | Security |
| [jQuery - XSS vulnerability under 1.9.0, when using jQuery(strInput)](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-1-9-0-when-using-jquerystrinput/) | High | Security |
| [jQuery - XSS vulnerability under 3.0.0, when making cross-domain calls without the dataType option](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-3-0-0-when-making-cross-domain-calls-without-the-datatype-option/) | High | Security |
| [jQuery-ui-tooltip - XSS vulnerability under 1.10.0, title attribute](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-tooltip-xss-vulnerability-under-1-10-0-title-attribute/) | High | Security |
| [jQuery-ui-dialog - XSS vulnerability under 1.10.0, title attribute](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-dialog-xss-vulnerability-under-1-10-0-title-attribute/) | High | Security |
| [jQuery-ui-dialog - XSS vulnerability under 1.10.0, closeText parameter](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-dialog-xss-vulnerability-under-1-10-0-closetext-parameter/) | High | Security |
| [moment.js - Regular Expression Denial of Service Vulnerability](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/moment-js-regular-expression-denial-of-service-vulnerability/) | High | Security |