[wp-trac] [WordPress Trac] #37110: Update to jQuery 3.*

WordPress Trac noreply at wordpress.org
Mon Apr 6 07:02:24 UTC 2020


#37110: Update to jQuery 3.*
-------------------------------------------------+-------------------------
 Reporter:  jorbin                               |       Owner:  (none)
     Type:  task (blessed)                       |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  External Libraries                   |     Version:
 Severity:  critical                             |  Resolution:
 Keywords:  early has-patch needs-testing        |     Focuses:  javascript
  needs-dev-note needs-screenshots needs-        |
  refresh                                        |
-------------------------------------------------+-------------------------

Comment (by yongkai):

 are CVE-2015-9251 and CVE-2019-11358 actually backported in wordpress core
 js version 1.12.4? This will always be a scanning problem in all wordpress
 if not fixed. For now, how can we fix the vulnerability without being
 affected by future wordpress core updates?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/37110#comment:103>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list