Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

jQuery Security vulnerability

See original GitHub issue

Dear @Phlow,

I love the feeling-responsive theme and think it is quite awesome. Thank you. I noticed that /assets/js/javascript.js uses jQuery@2.1.1which per google lighthouse has 1 vulnerability and it is listed as medium.

I have opened javascript.js and tried to just copy/paste/update the JQuery at the top of the doc with the most current version 3.4.0 but when I do that it kicks up JS validation issues with the rest of the javascript.js. I also tried separating out the various JS libs in the javascript.js but that also created validation errors. Do you have any suggestions?

Regards,

Adam DJ Brett

Screenshot

Issue Analytics

State:
Created 4 years ago
Comments:13 (7 by maintainers)

Top GitHub Comments

4reactions

Phlowcommented, Aug 19, 2019

Yes, I know, I have to get rid of jQuery. I think, I will have some time in the coming months to do this.

2reactions

Phlowcommented, Apr 30, 2019

Hey @adamdjbrett - Thank you for your help. I will try to update the script as soon as possible.

Top Results From Across the Web

jquery vulnerabilities | Snyk

version published direct vulnerabilities 3.6.3 20 Dec, 2022 0. C. 0. H. 0. M. 0. L 3.6.2 13 Dec, 2022 0. C. 0. H. 0....

Jquery : Security vulnerabilities - CVE Details

# CVE ID CWE ID Vulnerability Type(s) Publish Date Update Date Score Gaine... 1 CVE‑2021‑41184 79 Exec Code XSS 2021‑10‑26 2022‑11‑07 4.3 None 2 CVE‑2021‑41183...

A security vulnerability has been idenfied in jQuery ... - IBM

DESCRIPTION: jQuery, as used in Drupal core, is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A ...

84% of all websites are impacted by jQuery XSS vulnerabilities

In total, we tracked six security vulnerabilities affecting jQuery across all of its releases to date, four of which are medium severity Cross-Site ......

jQuery Security Vulnerability Mitigation - ICEfaces

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType ...