Lucene search

K
osvGoogleOSV:GHSA-89CH-HQF9-RGP3
HistoryNov 12, 2019 - 10:59 p.m.

Using JS libraries with known security vulnerabilities

2019-11-1222:59:28
Google
osv.dev
10

0.002 Low

EPSS

Percentile

56.0%

An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities.

0.002 Low

EPSS

Percentile

56.0%