Forum Replies Created
Viewing 2 posts - 1 through 2 (of 2 total)
Viewing 2 posts - 1 through 2 (of 2 total)
Hello,
We have updated Enfold on our website with last version 6.0.9 and we recently underwent a security scan of our website in order to find vulnerabilities. One of the elements the results showed was that the JSZip library we have in the enfold theme is an outdated version that elicits some safety concerns.
It was pointed out to us that our JSZip is v3.6.0 and that it should be updated to at least v3.8.0 to fix said security issues. The library itself is located inside config-lottie-animations/assets/lottie-player/dotlottie-player.js so it seams this problem is still not solved in Enfold 6.0.9
Are there any plans to update the theme to use a more recent version of JSZip in this file?
Thanks in advance
Yes it seems to solve our problem ! Thanks for your quick answer. Looking for 6.0.3 to be released very soon ! Olivier