search

django-admin-tools / django-admin-tools

Extends the Django Admin to include a extensible dashboard and navigation menu
MIT License
868 stars 115 forks source link

Jquery 1.9 considered insecure #105

Closed ddimmich closed 3 years ago

ddimmich commented 4 years ago

Hi,

We've been informed that the jquery version is considered insecure (the jquery-ui security ticket that you already have open was also considered):

https://nvd.nist.gov/vuln/detail/CVE-2015-9251 https://nvd.nist.gov/vuln/detail/CVE-2019-11358#vulnCurrentDescriptionTitle

What would it take to bump jquery to a newer version - happy to try and allocate some resource to help.

Thank you, Damian

izimobil commented 4 years ago

Nice, go !