Security support for old JavaScript libraries
AngularJS and Vue 2 are past end of life, and old jQuery versions still show up in every security scan. We backport the fixes to the version your application loads, so it passes the scan without a rewrite.
Request a server assessmentWhat we keep patched
Versions and their known vulnerabilities
| Product | Version | End of life | Known CVEs | Critical | Exploited | Forkward |
|---|---|---|---|---|---|---|
| jQuery | 1.7.1 | 5 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 1.8.3 | 5 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 1.9.1 | 3 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 1.11.1 | 3 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 1.12.4 | 4 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 2.2.4 | 4 | 0 | 1 | Patch on order, 48 h | |
| jQuery | 3.4.1 | 2 | 0 | 1 | Patch on order, 48 h | |
| AngularJS | 1.5.8 | 31 December 2021 | 13 | 0 | 0 | Patch on order, 48 h |
| AngularJS | 1.5.11 | 31 December 2021 | 13 | 0 | 0 | Patch on order, 48 h |
| AngularJS | 1.8.2 | 31 December 2021 | 10 | 0 | 0 | Patch on order, 48 h |
| AngularJS | 1.8.3 | 31 December 2021 | 10 | 0 | 0 | Patch on order, 48 h |
| Vue | 2.6.14 | 31 December 2023 | 1 | 0 | 0 | Patch on order, 48 h |
| Vue | 2.7.16 | 31 December 2023 | 1 | 0 | 0 | Patch on order, 48 h |
Vulnerabilities from the US National Vulnerability Database for each exact version. Exploited: listed in the CISA catalogue of known exploited vulnerabilities. End-of-life dates from each project, via endoflife.date. Your assessment shows which risks are real on your systems.
NIS2 and DORA
Both expect you to handle known vulnerabilities. Our fixes and their public status give your auditor an answer for every old system you keep. What each law asks
Patch on order, 48 h
We backport the fix to the version you run within 48 hours of your order, or within 24 hours with priority delivery. See the plans