Skip to content

Depends on vulnerable versions of jQuery and Chart.js #444

@Joegardner20

Description

@Joegardner20

Description:
The spark-script.js file in this project includes dependencies on two JS libraries with known security vulnerabilities: jQuery and Chart.js.

1. jQuery Dependency:
The project currently includes jQuery 3.2.1 vulnerable to CVE-2020-23064.
Affected Versions: jQuery versions >= 1.0.3 and < 3.5.0
Resolution: Update the jQuery version in jquery.js to 3.5.0 or a later secure version to mitigate this issue.

2. Chart.js Dependency:
The project uses Chart.js version 2.7.2, which is vulnerable to CVE-2020-7746.
Affected Versions: Chart.js < 2.9.4
Resolution: Update Chart.js to 2.9.4 or a later secure version.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions