What is the jQuery version thats included with 17.0.1

Securing applications
1

Hey all,

We discovered via an audit that the version of Keycloak we are on (12.0.2) is using an insecure version of jQuery (3.3.1). We need to upgrade Keycloak to get off of this version of jQuery, but I cannot seem to find documentation stating the version of jQuery. We’re looking to update to Keycloak17.0.1 as that’s the latest CodeCentric helm chart available for the version of helm we’re on.

2

Interesting that jquery is a security driver but a keycloak version that is affected by vulnerabilities is not.

Have you looked at the keycloakx chart? It is the successor chart for the quarkus version of keycloak, which started from version 18?

1 Like
3

Thanks for the reply. No I didn’t see that chart initially, thanks for mentioning it.