HeroDevs
Visit jQuery NES Home Page

jQuery UI 1.8.x Release Notes

2 versions

Comprehensive release notes and changelog for jQuery UI 1.8.x, including security patches, bug fixes, and feature updates across all supported versions.

Jan 19, 2026
Latest: 1.8.26
4 Patched Vulnerabilities
VEX Statements

January 2026

1.8.26

Released Jan 19, 2026
CVE-2021-41182
CVE-2021-41183
CVE-2010-5312
CVE-2021-41184

Notes

  • This release contains backported security fixes to remediate several vulnerabilities.
  • Full package name(s) and version(s):
    • @neverendingsupport/jquery-ui@1.8.24-jquery-ui-1.8.26

Security Fixes

  • datepicker:
    • Properly sanitize altField attribute.
      • This fixes a medium-severity Cross-Site Scripting (XSS) vulnerability (CVE-2021-41182).
    • Properly sanitize text options.
      • This fixes a medium-severity Cross-Site Scripting (XSS) vulnerability (CVE-2021-41183).
  • dialog:
    • Properly sanitize title attribute.
      • This fixes a medium-severity Cross-Site Scripting (XSS) vulnerability (CVE-2010-5312).
  • position:
    • Properly sanitize of option.
      • This fixes a medium-severity Cross-Site Scripting (XSS) vulnerability (CVE-2021-41184).

1.8.25

Released Jan 9, 2026

Notes

  • This is the initial release of jQuery UI NES, it contains no functional changes from the OSS version.
  • Full package name(s) and version(s):
    • @neverendingsupport/jquery-ui@1.8.24-jquery-ui-1.8.25

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.