snag.page

Every check ยท Page contents

Libraries with known flaws

content/libraries

What it checks

Versions of jQuery, jQuery UI, Bootstrap, AngularJS, Lodash and Moment.js named in script addresses.

Why it matters

These versions have published flaws that attackers know how to use.

How to fix it

  1. Update each library to at least its fixed version: jQuery 3.5.0, jQuery UI 1.13.0, Bootstrap 3.4.1 or 4.3.1, Lodash 4.17.21, Moment.js 2.29.4.
  2. Replace AngularJS, which is no longer maintained.
  3. Test the pages that use them after updating.

Check a site for this and everything else: snag.page. More on page contents: Mixed content Forms over HTTPS Integrity on CDN files Generator tag Script hosts