[MESOS-10230] Please update JQuery from 3.2.1 to 3.5.0+

• Type: Improvement
• Status: Accepted
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.11.0
• Component/s: security
• Assignee: Andreas Peters
• Reporter: p engels
• Created: 16/Sep/21 20:46
• Updated: 18/Aug/22 21:18

Description

JQuery versions between 1.2 and 3.5.0 are vulnerable to multiple cross-site-scripting vulnerabilities. More info can be found on JQuery's website:

blog.jquery.com: https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/

My organization's vulnerability scanner locates the out-of-date jquery at this url (sanitized for security reasons):

http://example.com:5050/assets/libs/jquery-3.2.1.min.js

 

Please remove the old version of JQuery and replace it with version 3.5.0 or greater. If this is already planned for a future release, please comment on this request with the version this will be fixed in.

 

Keep up the good work, Apache community <3

Issue Links

• links to: GitHub Pull Request #411