Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use latest version of jQuery #17204

Closed
Tracked by #17645
tnir opened this issue Apr 11, 2022 · 4 comments · Fixed by #17391
Closed
Tracked by #17645

Use latest version of jQuery #17204

tnir opened this issue Apr 11, 2022 · 4 comments · Fixed by #17391

Comments

@tnir
Copy link
Contributor

tnir commented Apr 11, 2022

Describe the task

Use latest version of jQuery 3.6.0.

@github-actions
Copy link
Contributor

Thanks for the issue, we will take it into consideration! Our team of engineers is busy working on many types of features, please give us time to get back to you.

Feature requests that require more discussion may be closed. Read more about our feature request process on forem.dev.

To our amazing contributors: issues labeled bug are always up for grabs, but for feature requests, please wait until we add a ready for dev before starting to work on it.

To claim an issue to work on, please leave a comment. If you've claimed the issue and need help, please ping @forem-team. The OSS Community Manager or the engineers on OSS rotation will follow up.

For full info on how to contribute, please check out our contributors guide.

@wiseaidev
Copy link
Contributor

I was about to file this issue after finding a security report about this vulnerable version.

@tnir
Copy link
Contributor Author

tnir commented Apr 22, 2022

I was about to file this issue after finding a security report about this vulnerable version.

Actually https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006 (or CVE-2019-11358 and
CVE-2019-5428) was already resolved in #17206, so you should refer https://snyk.io/test/npm/jquery/3.4.1 instead.

@wiseaidev
Copy link
Contributor

Actually https://security.snyk.io/vuln/SNYK-JS-JQUERY-174006 (or CVE-2019-11358 and
CVE-2019-5428) was already resolved in #17206, so you should refer https://snyk.io/test/npm/jquery/3.4.1 instead.

I meant before you opened the issue and did all the changes, the version of jquery used in production was 3.3.1. Now, I don't see this library is used anymore. It was under the javascript libraries section:

Screenshot from 2022-04-22 15-06-53

That's why i was about to open this issue if it wasn't already. And i thought i would be a criminal if i didn't open this issue.

Anywho, have a great day.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants