GHSA-jmh9-6rjq-gjh9: Vulnerable embedded jQuery Version

June 5, 2024

PIMCore uses the JavaScript library jQuery in version 3.4.1. This version is vulnerable to cross-site-scripting (XSS).

References

github.com/advisories/GHSA-jmh9-6rjq-gjh9
github.com/pimcore/admin-ui-classic-bundle
github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-jmh9-6rjq-gjh9

Code Behaviors & Features

Detect and mitigate GHSA-jmh9-6rjq-gjh9 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →