You cannot update this specific version. There are still some plugins (and maybe some old core scripts as well) that use jQuery 1, so we cannot remove that dependency. If a new plugin wants to use jQuery then there is an additional plugin available: https://github.com/jenkinsci/jquery3-api-plugin <https://github.com/jenkinsci/jquery3-api-plugin>
> Am 26.08.2020 um 16:38 schrieb eric....@gmail.com <eric.fet...@gmail.com>: > > Hi All, > > Just got gigged by our security team for a vulnerability in Jenkins with the > version of JQuery installed. How do I go about updating the version of > JQuery Jenkins runs? Here's the specifics of the vulnerability: > > Plugin Output: > URL : http://myMachine:8081/js/jquery-1.11.1.min.js > Installed version : 1.11.1 > Fixed version : 3.5.0 > > I'm running version 2.235.5 of Jenkins. > > Thanks, > Eric > > -- > You received this message because you are subscribed to the Google Groups > "Jenkins Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to jenkinsci-users+unsubscr...@googlegroups.com > <mailto:jenkinsci-users+unsubscr...@googlegroups.com>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-users/13c921b1-02f4-4f00-a474-266fe766ced0n%40googlegroups.com > > <https://groups.google.com/d/msgid/jenkinsci-users/13c921b1-02f4-4f00-a474-266fe766ced0n%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "Jenkins Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/C41FF017-77FB-4726-93B4-264011284A0E%40gmail.com.
