# How to find and update vulnerable JavaScript libraries

> An old jQuery, Bootstrap or Lodash on your pages has published attacks anyone can copy. Check which versions load, update to the fixed release and remove copies plugins bundle on their own.

Security · HTML version: https://getreport.app/learn/vulnerable-javascript-libraries

## Vulnerable JavaScript libraries

Passing looks like: No known security holes in the JavaScript libraries we could identify.

**Why it matters.** Old library versions have published attacks that anyone can copy, most often cross-site scripting. Attackers scan for them automatically, and security reviews and some insurers flag them.

**How to fix it.**

1. Update each library to at least the fixed version in the technical detail; on WordPress, update the theme and plugins that bundle it.
2. For jQuery on WordPress, remove plugins that load their own old copy instead of the one WordPress ships.
3. If a library is no longer needed, remove it; Moment.js and AngularJS are end-of-life, so plan a replacement.

Check your own page: https://getreport.app/