Security: Update jQuery

fbdesignpro / sweetviz

Visualize and compare datasets, target values and associations, with one line of code.

MIT License

2.9k stars 273 forks source link

Security: Update jQuery #154

Closed hedsnz closed 9 months ago

hedsnz commented 1 year ago

There are several CVEs associated with the version of jQuery in this project (3.4.1). For example:

https://nvd.nist.gov/vuln/detail/cve-2020-11023
https://nvd.nist.gov/vuln/detail/CVE-2020-23064

These are fixed in 3.5.0, though it probably makes sense to upgrade to 3.6 or 3.7.x anyway.

Happy to submit a PR for this upgrade if required.

fbdesignpro commented 1 year ago

@hedsnz that sounds great! Thank you; actually, a PR would be appreciated. I'll test and push it quickly if you can come up with it!

fbdesignpro commented 11 months ago

Hi @hedsnz! I know sometimes things get under the radar, let me know if you wanted to do the PR for it as I will be pushing out a new version soon. No worries either way!