[Snyk] Upgrade jquery from 3.3.0 to 3.5.1 #3

snyk-bot · 2021-03-22T01:40:19Z

Snyk has created this PR to upgrade jquery from 3.3.0 to 3.5.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released a year ago, on 2020-05-04.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:sshpk:20180409	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Override Protection Bypass npm:qs:20170213	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution npm:extend:20180424	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution npm:deep-extend:20180409	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-174125	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NPMUSERVALIDATE-1019352	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-NPM-537606	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary File Overwrite SNYK-JS-NPM-537603	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-73638	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-608086	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-590103	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-450202	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONPOINTER-598804	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary Code Execution SNYK-JS-ISMYJSONVALID-597167	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISMYJSONVALID-597165	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Arbitrary File Overwrite SNYK-JS-FSTREAM-174725	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Remote Memory Exposure SNYK-JS-BL-608877	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Uninitialized Memory Exposure npm:tunnel-agent:20170305	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:tough-cookie:20170905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Uninitialized Memory Exposure npm:stringstream:20180511	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature
Prototype Pollution npm:hoek:20180212	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Time of Check Time of Use (TOCTOU) npm:chownr:20180731	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) npm:brace-expansion:20170302	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Access Restriction Bypass npm:npm:20180222	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Insertion of Sensitive Information into Log File SNYK-JS-NPM-575435	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution npm:lodash:20180130	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-LODASH-567746	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-JQUERY-567880	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-JQUERY-565129	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JQUERY-174006	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-DOTPROP-543489	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Unauthorized File Access SNYK-JS-NPM-537604	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) npm:is-my-json-valid:20180214	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jquery

3.5.1 - 2020-05-04
3.5.1
3.5.0 - 2020-04-10
See the blog post:
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/
and the upgrade guide:
https://jquery.com/upgrade-guide/3.5/

NOTE: Despite being a minor release, this update includes a breaking change that we had to make to fix a security issue ( CVE-2020-11022). Please follow the blog post & the upgrade guide for more details.
3.4.1 - 2019-05-01
3.4.1
3.4.0 - 2019-04-10
3.4.0
3.3.1 - 2018-01-20
3.3.1
3.3.0 - 2018-01-19
3.3.0