search

sebfz1 / wicket-jquery-ui

jQuery UI & Kendo UI integration in Wicket
http://www.7thweb.net/wicket-jquery-ui/
Other
92 stars 58 forks source link

Security Vulnerability from moment.js in wicket-jquery-ui-core #280

Closed GiantEnemyCrab closed 6 years ago

GiantEnemyCrab commented 6 years ago

Is it possible to update the moment.js part of this repository to a newer version. (Otherwise my organization's nexus firewall flags it as security vulnerability and I can't download the dependency from maven)

https://nodesecurity.io/advisories/55

GiantEnemyCrab commented 6 years ago

Currently, moment.js's version is 2.8.4: https://github.com/sebfz1/wicket-jquery-ui/blob/master/wicket-jquery-ui-core/src/main/resources/com/googlecode/wicket/jquery/core/resource/moment.min.js

Hopefully not a difficult change to apply here.

GiantEnemyCrab commented 6 years ago

This is merged now, thank you for a quick response on this.