WS-2016-0090 (Medium) detected in jquery-2.1.4.min.js
Closed this issue · 0 comments
mend-bolt-for-github commented
WS-2016-0090 - Medium Severity Vulnerability
Vulnerable Library - jquery-2.1.4.min.js
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.min.js
Path to dependency file: /tmp/ws-scm/rollup-template/node_modules/js-base64/test/index.html
Path to vulnerable library: /rollup-template/node_modules/js-base64/test/index.html
Dependency Hierarchy:
- ❌ jquery-2.1.4.min.js (Vulnerable Library)
Found in HEAD commit: aa4abebcbe02c9f170145fdef2b6e0306b885a73
Vulnerability Details
JQuery, before 2.2.0, is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.
Publish Date: 2016-11-27
URL: WS-2016-0090
Suggested Fix
Type: Upgrade version
Origin: jquery/jquery@b078a62
Release Date: 2019-04-08
Fix Resolution: 2.2.0
Step up your Open Source Security Game with WhiteSource here