[GH-ISSUE #232] Broken jquery libs (Security) #185

Closed
opened 2026-02-26 09:36:34 +03:00 by kerem · 1 comment
Owner

Originally created by @drwetter on GitHub (Jul 28, 2017).
Original GitHub issue: https://github.com/opensolutions/ViMbAdmin/issues/232

The library jquery-ui-dialog version 1.10.4 has known security issues.
https://github.com/jquery/api.jqueryui.com/issues/281
https://snyk.io/vuln/npm:jquery-ui:20160721
The vulnerability is affecting all versions prior 1.12.0 (between * and 1.12.0)

The library jquery-migrate version 1.2.1 has known security issues.
http://bugs.jquery.com/ticket/11290
http://research.insecurelabs.org/jquery/test/
The vulnerability is affecting all versions prior 1.2.2 (between * and 1.2.2)

The library jquery version 1.11.1 has known security issues.
https://github.com/jquery/jquery/issues/2432
http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/
The vulnerability is affecting all versions prior 1.12.0 (between 1.4.0 and 1.12.0)

Retrieved via retire.js

Originally created by @drwetter on GitHub (Jul 28, 2017). Original GitHub issue: https://github.com/opensolutions/ViMbAdmin/issues/232 _The library jquery-ui-dialog version 1.10.4 has known security issues. https://github.com/jquery/api.jqueryui.com/issues/281 https://snyk.io/vuln/npm:jquery-ui:20160721 The vulnerability is affecting all versions prior 1.12.0 (between * and 1.12.0)_ _The library jquery-migrate version 1.2.1 has known security issues. http://bugs.jquery.com/ticket/11290 http://research.insecurelabs.org/jquery/test/ The vulnerability is affecting all versions prior 1.2.2 (between * and 1.2.2)_ _The library jquery version 1.11.1 has known security issues. https://github.com/jquery/jquery/issues/2432 http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/ The vulnerability is affecting all versions prior 1.12.0 (between 1.4.0 and 1.12.0)_ Retrieved via retire.js
kerem closed this issue 2026-02-26 09:36:34 +03:00
Author
Owner

@Shadowghost commented on GitHub (Aug 17, 2017):

Can we just upgrade the packages locally?

<!-- gh-comment-id:323188027 --> @Shadowghost commented on GitHub (Aug 17, 2017): Can we just upgrade the packages locally?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/ViMbAdmin-opensolutions#185
No description provided.