2. PHPRunner General questions
  3. Deprecated Momentjs and jQuery in PHPRunner 10.7
This topic is locked

Deprecated Momentjs and jQuery in PHPRunner 10.7

 		5/1/2022 6:45:38 AM
PHPRunner General questions
N
 nematollahian author

Hello Dears
I tried PHPRunner 10.7 build 38571 from your https://xlinesoft.com/download link to test and buy, but i faced Two High Security risk issue in generated App.
The first one was deprecated Momentjs v2.13.0 with security issue CVE-2017-18214 (Ref. https://nvd.nist.gov/vuln/detail/CVE-2017-18214) and the other was Old jQuery and Plugins v1.11.0 with security issues CVE-2021-41183 & CVE-2021-41184 & CVE-2021-41182 & CVE-2016-7103 & CVE-2020-11023 & CVE-2020-11022 & CVE-2015-9251 (Example Ref. https://nvd.nist.gov/vuln/detail/cve-2015-9251).
Would you please fix this issues? Your app is wonderful and i don't want to miss it.
Thank you
N
 		nematollahian author 5/11/2022

No answer for 10 days on a Critical question?!
@admin
admin 5/11/2022

You need to pay a bit more attention to what you read. First, this is a member-to-member sefl help forum. If you have something that you think is important or urgent, you need to contact support directly.

Second, if you actually read what those vulnerabilities say, you can see that the first one is for "The moment module before 2.19.3 for Node.js" and we do not use Node.js in our web applications. And the second one applies to some old jQuery plugins that we do not use.

If you really need to make sure your web application is secure you need to check 'Testing for vulnerabilities' section in this article:
https://xlinesoft.com/blog/2021/06/17/secure-low-code-web-applications/