JQuery Software not Updated to Version 3.6.2

Explore how AEM safeguards your jQuery component by applying security patches to version 1.12.4, ensuring backward compatibility and addressing critical CVEs.

Description description

Environment

Experience Manager

Issue/Symptoms

JQuery component is not updated to the latest version.

Resolution resolution

AEM applies security patches to 1.12.4 and does not plan to remove it for backward compatibility reasons. As of today, our fork (1.12.4-aem) contains the fixes for CVEs CVE-2015-9251, CVE-2019-11358, CVE-2020-11022, and CVE-2020-11023.