WS-2016-0090 (Medium) detected in jquery-1.8.1.min.js #62
Labels
security vulnerability
Security vulnerability detected by WhiteSource
Comments
mend-bolt-for-github
bot
added
the
security vulnerability
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
WS-2016-0090 - Medium Severity Vulnerability
JavaScript library for DOM operations
Library home page: https://cdnjs.cloudflare.com/ajax/libs/jquery/1.8.1/jquery.min.js
Path to dependency file: /tmp/ws-scm/sync-stripe-to-zendesk/node_modules/redeyed/examples/browser/index.html
Path to vulnerable library: /sync-stripe-to-zendesk/node_modules/redeyed/examples/browser/index.html
Dependency Hierarchy:
Found in HEAD commit: 9e27cb6f56b78a2b53b3671a65fdd9b080d89b7f
JQuery, before 2.2.0, is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.
Publish Date: 2016-11-27
URL: WS-2016-0090
Base Score Metrics not available
Type: Upgrade version
Origin: jquery/jquery@b078a62
Release Date: 2019-04-08
Fix Resolution: 2.2.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: