...

Based on the jQuery announcement, the severity of this vulnerability is unknown. The severity may further vary according to a given deployment pattern.

Exposure

The exposure from this vulnerability is expected to be low, and it is unlikely that this vulnerability has been exploited.

...