The jquery version bundled with ROR is old and has security fixed, which needs to be updated. Is there any plan to upgrade this to 3.5 or above ?
Good call @Vinod, it’s not directly managed as a dependency, so it was not signalled by our audit tools.
This has to change. Will add a task.