Project

General

Profile

Actions
Copy link

Support #80

closed
JA JA

old jquery

Support #80: old jquery

Added by Josip Almasi over 4 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Low
Assignee:
Josip Almasi
Start date:
06/23/2021
Due date:
% Done:

0%

Estimated time:

Description

/babylon/sound-subscribe.html
/babylon/sound-test.html
/babylon/video-test.html
/babylon/sound-publish.html

<script src="https://code.jquery.com/jquery-3.3.1.min.js&quot;

CVE-2019-11358: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
CVE-2020-11022: Regex in its jQuery.htmlPrefilter sometimes may introduce XSS
CVE-2020-11023: Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

Actions
Copy link

Also available in: PDF Atom