bootstrap-accessibility-plugin icon indicating copy to clipboard operation
bootstrap-accessibility-plugin copied to clipboard

Security vulnerability: reliance on EOL jQuery version

Open mateusz opened this issue 6 years ago • 0 comments

Currently there seems to be no way to use this plugin without introducing vulnerabilities.

All major lines of bootstrap-accessibility-plugin quietly rely on vulnerable jQuery 1. This is evidenced for example in this size call which has been deprecated as of jQuery 3. jQuery v1 and v2 contain security issues, and are unsupported (EOL), but jQuery 3 cannot be used.

mateusz avatar Aug 04 '19 22:08 mateusz