Moment Javascript Library Wrong Version

(0) Share

Report

Posted on by _rafaelbenicio

Hello Community,

I have been trying to address some security vulnerability issues with the Moment JS Library after running a web scan on the Power Pages website. Unfortunately, I can't find a way to deal with the body code in the image below. I have done quite some research and It seems the code is managed by Microsoft. I believe the code is coming from one of those ADX copy pages.

The Portal is pointing to the library version 2.24.0 but it should be pointing to the latest version (2.24.4) since the vulnerabilities have been addressed. Has any of you encountered this issue before? Since I couldn't find a way to where those dates are being called out in the Web Pages or Web Templates, could we create a script to call the latest version of the JS library? Is there any other way to mitigate this situation?

Thank you!

Categories:

General topics

I have the same question (0)

All responses (3)

Answers (0)

Sort by

oliver.rodrigues 9,471 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi, do you have details of the vulnerability report? I can share this directly with Microsoft to see if they can update it. Assuming there is no compatibility issues this should be a straight forward enough depending on the severity of the issue.

thanks

Was this reply helpful? Yes No
_rafaelbenicio 2 on at

Like (0)

Report
Copy link

Link copied!

Hi @OliverRodrigues , Sent you a private message!

Was this reply helpful? Yes No
oliver.rodrigues 9,471 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

Hi @_rafaelbenicio the upgrade is planned to happen in the Q1 of 2023 👍.

Was this reply helpful? Yes No