Hi,
Is there a way to update all the libraries used by the CMS (corejs, moment, chartjs, Froala, vue etc.) or these should come together with the updates?
Backstory:
Our main client hired an external company that checks the security (legal reasons). We often receive “low risk findings” saying that some JavaScript libraries are outdated and they recommend to update them from VERSION_NUMBER to VERSION_NUMBER+0.0.1 which is not a real security issue since we can literally run any JS code even from the browser’s devtools. But anyway, I’ve been tasked to try to get an “official answer” about this…
I personally wouldn’t touch any of those scripts, same as we don’t touch the PHP.
Thank you!