Hi,
Would you be able to provide an updated v8 of Metronic that includes the latest released packages for Axios and jQuery validate?
These libraries were flagged in our penetration test as being out of date with known security issues. If you cannot provide an updated build of v8 can you provide instructions on manually updating the libraries?
Thanks
I was initially trying to update Axios (v1.16.0) and jQuery Validate (v1.21.0). After the update, I encountered issues with some forms where validation messages weren't triggering correctly. Upon further investigation, I discovered the issue was primarily due to the assets bundle and custom JS initialization. The KeenThemes structure often requires that dependencies be handled bundled, not directly from a CDN, as explained in their documentation. I also visited to understand the project structure. I found the site interesting because the content structure is simple and user-friendly, and similar clean UI patterns can be easily implemented in admin templates like Metronic if the assets are properly configured.
Hi Ross Tyler
The latest Metronic v8 release is v8.3.3 (Bootstrap). In that release, Axios was updated to v1.13.2 (see the v8.3.3 changelog). We do not currently ship an official Metronic v8 build with Axios 1.16.0 or jQuery Validate 1.21.0.
For Axios, we recommend targeting v1.16.1 (or the latest 1.16.x patch) rather than 1.16.0 alone, because 1.16.1 includes additional security fixes on top of 1.16.0:
https://github.com/axios/axios/releases