WS-2016-0090 Medium Severity Vulnerability detected by WhiteSource

[mend-bolt-for-github]

WS-2016-0090 - Medium Severity Vulnerability

Vulnerable Library - jquery-2.2.4.tgz

JavaScript library for DOM operations

path: /test1111/node_modules/jquery/package.json

Library home page: https://registry.npmjs.org/jquery/-/jquery-2.2.4.tgz

Dependency Hierarchy:

• ❌ jquery-2.2.4.tgz (Vulnerable Library)

Vulnerability Details

JQuery is vulnerable to Cross-site Scripting (XSS) attacks via text/javascript response with arbitrary code execution.

Publish Date: 2016-11-27

URL: WS-2016-0090

CVSS 2 Score Details (4.3)

Base Score Metrics not available

---

Step up your Open Source Security Game with WhiteSource here