Skip to content

Commit

Permalink
Fix CVE
Browse files Browse the repository at this point in the history
  Title: [1084344] jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
  Severity: moderate
  CWE: CWE-79
  Vulnerable versions: <1.13.2
  Patched versions: >=1.13.2
  Recommendation: Upgrade to version 1.13.2 or later
  Version: 1.13.0
  Path: jquery-ui
  More info: GHSA-h6gj-6jjq-h8g9

  -> Vulnerability found in mako version 1.1.2
     Vulnerability ID: 50870
     Affected spec: <1.2.2
     ADVISORY: Mako 1.2.2 includes a fix for a REDoS
     vulnerability.sqlalchemy/mako#366
     PVE-2022-50870
     For more information, please visit
     https://pyup.io/vulnerabilities/PVE-2022-50870/50870/
  • Loading branch information
sbrunner committed Oct 3, 2022
1 parent 402c71e commit 65c9143
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -104,7 +104,7 @@
"jquery": "3.5.1",
"jquery-datetimepicker": "2.5.21",
"jquery-mousewheel": "3.1.13",
"jquery-ui": "1.13.0",
"jquery-ui": "1.13.2",
"jquery-ui-touch-punch": "0.2.3",
"jsdoc": "3.6.4",
"jsdoc-plugin-typescript": "2.0.5",
Expand Down
2 changes: 1 addition & 1 deletion requirements.txt
@@ -1,6 +1,6 @@
beautifulsoup4==4.9.0
glob2==0.7
htmlmin==0.1.12
Mako==1.1.2
Mako==1.2.3
requests==2.23.0
transifex-client==0.12.5

0 comments on commit 65c9143

Please sign in to comment.