Skip to content

jQuery 3.3.1 has multiple CVEs #1938

@ToppleTheNun

Description

@ToppleTheNun

Describe the bug
jQuery 3.3.1 has multiple CVEs that are starting to show up in my organization's automated security scanning as it is contained in the output javadoc.

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-11022
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2019-11358
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-11023

Expected behaviour
Javadoc output to not have multiple CVEs associated with it.

To Reproduce

  1. Create a very basic Kotlin project with Dokka
  2. Use Dokka to create the javadoc for the project
  3. Check the javadoc output and see that it's using jQuery 3.3.1

Dokka configuration
Configuration of dokka used to reproduce the bug

                dokkaSourceSets {
                    configureEach {
                        // Disable linking to online kotlin-stdlib documentation
                        noStdlibLink.set(true)

                        // Disable linking to online JDK documentation
                        noJdkLink.set(true)
                    }
                }

Installation

  • Operating system: macOS
  • Build tool: Gradle v7.0.2
  • Dokka version: 1.4.32

Are you willing to provide a PR?
Yes, I am willing to provide a PR

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugformat: JavadocAn issue/PR related to Dokka's Javadoc output format or the Javadoc comments in generalgood first issueA beginner-friendly issue for which some assistance is expected

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions