rails/jquery-rails

CVE-2019-5428

santosh-1987 opened this issue · 1 comments

We have a CVE related to jquery 1.2.4- https://www.cvedetails.com/cve/CVE-2019-5428/

Can we install a specific version of jquery-rails (e.g jquery-rails3 / jquery-rails4) in order to get rid of CVE Issues.

Not sure what you mean. You can install a different gem via your Gemfile and use it's version constraints to help you. Though this is out of scope for the issues tracker, we reserve it for bugs only. Thanks!