awslabs / aws-js-s3-explorer

AWS JavaScript S3 Explorer is a JavaScript application that uses AWS's JavaScript SDK and S3 APIs to make the contents of an S3 bucket easy to browse via a web browser.
Apache License 2.0
827 stars 278 forks source link

Uses vulnerable version 3.4.1 of jQuery #122

Closed john-aws closed 1 month ago

john-aws commented 1 month ago

The v2-alpha branch index.html uses jQuery version 3.4.1 which is known to introduce cross-site scripting (XSS) and prototype pollution vulnerabilities. Please update to the latest version (3.7.1 at the time of writing).

### Tasks
### Tasks