retirejs find jquery in demo folder of tinycolor2
See original GitHub issueExpected Behavior:
no retirejs warnings
Actual Behavior:
$ npx retire
Loading from cache: https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/jsrepository.json
Loading from cache: https://raw.githubusercontent.com/RetireJS/retire.js/master/repository/npmrepository.json
[..path..]/node_modules/tinycolor2/demo/jquery-1.9.1.js
↳ jquery 1.9.1 has known vulnerabilities: severity: medium; issue: 2432, summary: 3rd party CORS request may execute, CVE: CVE-2015-9251; https://github.com/jquery/jquery/issues/2432 http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/ https://nvd.nist.gov/vuln/detail/CVE-2015-9251 http://research.insecurelabs.org/jquery/test/ severity: medium; CVE: CVE-2015-9251, issue: 11974, summary: parseHTML() executes scripts in event handlers; https://bugs.jquery.com/ticket/11974 https://nvd.nist.gov/vuln/detail/CVE-2015-9251 http://research.insecurelabs.org/jquery/test/
Version: react-color@2.14.1
=> what to do? find something else/fork? => also made an issue at tinycolor2 but it does not seem to be alive 🙈 https://github.com/bgrins/TinyColor/issues/195
Issue Analytics
- State:
- Created 5 years ago
- Comments:5 (2 by maintainers)
Top Results From Across the Web
retirejs find jquery in demo folder of tinycolor2 · Issue #4321
Expected Behavior: no retirejs warnings Actual Behavior: $ npx retire Loading from cache: ...
Read more >Developers - retirejs find jquery in demo folder of tinycolor2 -
Coming soon: A brand new website interface for an even better experience!
Read more >convert_test.go · master · GitLab.org / security-products / analyzers ...
Dependency Scanning Analyzer based on Retire.js. ... CompareKey: "app/node_modules/tinycolor2/demo/jquery-1.9.1.js:jquery:cve:CVE-2015 ... Location: report.
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Hi! how is this going? 😃
Soon, within the next month or two max.
On Tue, Jan 22, 2019 at 4:05 PM Thomas Allmer notifications@github.com wrote: