Axios 1.16.0 and jQuery Validate 1.21.0 update for version 8
Hi,
Would you be able to provide an updated v8 of Metronic that includes the latest released packages for Axios and jQuery validate?
These libraries were flagged in our penetration test as being out of date with known security issues. If you cannot provide an updated build of v8 can you provide instructions on manually updating the libraries?
Thanks
Replies (1)
Hi Ross Tyler
The latest Metronic v8 release is v8.3.3 (Bootstrap). In that release, Axios was updated to v1.13.2 (see the v8.3.3 changelog). We do not currently ship an official Metronic v8 build with Axios 1.16.0 or jQuery Validate 1.21.0.
For Axios, we recommend targeting v1.16.1 (or the latest 1.16.x patch) rather than 1.16.0 alone, because 1.16.1 includes additional security fixes on top of 1.16.0:
https://github.com/axios/axios/releases