Skip to content

Update outdated dependencies #4668

@Aditya-269

Description

@Aditya-269

Description

The project has several dependency-related issues that need to be addressed for better security and maintainability:

  1. Outdated jQuery Version: The project is using older jQuery version which has known security vulnerabilities and is no longer maintained. This version is particularly vulnerable to:

    • Cross-site scripting (XSS) attacks
    • Prototype pollution
    • Other security vulnerabilities documented in the jQuery security advisories
  2. Outdated Dependencies : Several packages in package.json are using older versions that have security updates available:

    • node-static (v0.7.11) has known directory traversal vulnerabilities
    • lodash.template has command injection vulnerabilities
    • Several other dependencies have security patches available

Image

Image

Checklist

  • I have read and followed the project's code of conduct.
  • I have searched for similar issues before creating this one.
  • I have provided all the necessary information to understand and reproduce the issue.
  • I am willing to contribute to the resolution of this issue.

Thank you for contributing to our project! We appreciate your help in improving it.

📚 See contributing instructions.

🙋🏾🙋🏼 Questions: Community Matrix Server.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions