Page History

Retire.js is a free open source scanner for detecting the use of JavaScript libraries with known vulnerabilities.

...

1. http://retirejs.github.io/retire.js/
2. https://github.com/RetireJS/retire.js/

I (Jacques Le Roux) just (2015-12-08) used retire.js on trunk HEAD (r1716917) and got these results:

framework\images\webapp\images\jquery\jquery-migrate-1.2.1.js has known vulnerabilities: severity: medium; bug: 11290, summary: Selector interpreted as HTML; http://bugs.jquery.com/ticket/11290 http://research.insecurelabs.org/jquery/test/
specialpurpose\solr\webapp\solr\js\require.js has known vulnerabilities: severity: medium; bug: 11290, summary: Selector interpreted as HTML; http://bugs.jquery.com/ticket/11290 http://research.insecurelabs.org/jquery/test/
specialpurpose\birt\webapp\birt\webcontent\birt\ajax\lib\prototype.js has known vulnerabilities: severity: high; CVE: CVE-2008-7220; http://www.cvedetails.com/cve/CVE-2008-7220/

...

Following are the efforts put to fix vulnerabilities detected using retire.js: