New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Broken jquery libs (Security) #232

Closed

drwetter opened this issue Jul 28, 2017 · 1 comment

drwetter commented Jul 28, 2017

The library jquery-ui-dialog version 1.10.4 has known security issues.
jquery/api.jqueryui.com#281
https://snyk.io/vuln/npm:jquery-ui:20160721
The vulnerability is affecting all versions prior 1.12.0 (between * and 1.12.0)

The library jquery-migrate version 1.2.1 has known security issues.
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
The vulnerability is affecting all versions prior 1.2.2 (between * and 1.2.2)

The library jquery version 1.11.1 has known security issues.
jquery/jquery#2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
The vulnerability is affecting all versions prior 1.12.0 (between 1.4.0 and 1.12.0)

Retrieved via retire.js

Shadowghost commented Aug 17, 2017

Can we just upgrade the packages locally?

barryo closed this as completed in

b000c03

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment