CVE-2025-3573: Jquery 4 Push Removed

Calling `.push()` on a jQuery object throws a TypeError in jQuery 4.0.0 and newer, potentially causing scripts to crash and fail-open. Use `.pushStack()` instead.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0

greprules fetch cve-2025-3573-jquery-4-push-removed --engine opengrep

Description

Calling `.push()` on a jQuery object throws a TypeError in jQuery 4.0.0 and newer, potentially causing scripts to crash and fail-open. Use `.pushStack()` instead.

License: Apache-2.0
Source context: Public repository
Source: Provally CVE rule catalog
Validation status: Verified
Quality signals: 146 downloads
0 direct146 via packs
· 0 stars · Quality score 70How quality works
Included packs: 2 packs

Community feedback

0 signals from signed-in users.

Useful: 0
False positive: 0
Metadata: 0