Vulnerability advisory
GHSA-89ch-hqf9-rgp3
Using JS libraries with known security vulnerabilities
Also known as CVE-2019-8121
Severity
Severity not reported.
Affected versions
| Affected | Fixed in |
|---|---|
2.2 to before 2.2.10 | 2.2.10Advisories → |
2.3 to before 2.3.3 | 2.3.3Advisories → |
| Affected | Fixed in |
|---|---|
2.2 to before 2.2.10 | 2.2.10Advisories → |
2.3 to before 2.3.2-p2 | 2.3.2-p2Advisories → |
Description
An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities.