search

openwrt / routing

OpenWrt Routing Packages
330 stars 370 forks source link

luci-app-bmx6: jquery is outdated and vulnerable #963

Closed BKPepe closed 11 months ago

BKPepe commented 1 year ago

Maintainer: @p4u Environment: all

Description:

Hey, a few minutes I got security alert digest from GitHub about outdated jquery-1.4.js as it is vulnerable to CVE-2020-11022. Could you please check it?

BKPepe commented 1 year ago

Another report came out with this vulnerability.

PolynomialDivision commented 1 year ago

Maybe we should move this package to abandoned?

BKPepe commented 11 months ago

Do we really want to move these packages, which are vulnerable to abandoned feed to keep continuing users to give a choice to install this package? Well, I don't think so. Anyone who wants to use it can go through the Git history, revert it and update it, but reviving old projects does not make any sense, when there is replacement.