Threats affecting pkg:npm/jquery

HCL BigFix SCM Reporting version 11.0.5 uses an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x is end-of-life and no longer receives security updates, this exposes the application to known security weaknesses. This increases the risk of client-side attacks such as Cross-Site Scripting (XSS) or manipulation through vulnerable third-party components. The vulnerability is tracked as CVE-2026-21821 with a high severity score of 8.3. No official patch or remediation guidance is currently available from the vendor.