---
title: jQuery – Prototype Pollution Vulnerability Under 3.4.0
description: "Impact Area Security       Severity High       Affected Element **ServiceNow** UI Script **Salesforce** Static Resource ## Rule number **SN-JSL-010 **(for ServiceNow) **SF-JSL-010 **(for Salesforce) ## Impact jQuery before 3.4.0 mishandles jQuery.extend(true, {}, …) because of Object.prototype pollution. If…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/jquery-prototype-pollution-vulnerability-under-3-4-0/"
updated: "2025-03-21"
category: Rules
---

# jQuery – Prototype Pollution Vulnerability Under 3.4.0

Impact Area

Security

 

 

 

           Severity

High

 

 

 

           Affected Element

**ServiceNow**

UI Script

**Salesforce**

Static Resource

## Rule number

**SN-JSL-010 **(for ServiceNow)

**SF-JSL-010 **(for Salesforce)

## Impact

jQuery before 3.4.0 mishandles jQuery.extend(true, {}, …) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

## Remediation

Update jQuery to the latest version.

### Time to fix

30 min