New library versions were added to the Kintone CDN .

New library versions

encoding.js

• versions: 2.4.0

FullCalendar

• versions: 7.1.0

JSZip

• versions: 3.10.2

Lodash

• versions: 4.18.1

Versions before 4.18.0 contain vulnerabilities that can be read in the GitHub pull request .
The vulnerability has been fixed in 4.18.0.

Moment.js

• versions: 2.31.0

Versions before 2.31.0 contain vulnerabilities that can be read in the GitHub security advisory .
The vulnerability has been fixed in 2.31.0.

Swiper

• versions: 14.3.0

Vue.js

• versions: 3.5.43

The full list of libraries on the Kintone CDN can be found on the Kintone CDN page.

Vulnerability information

AngularJS

Versions 1.8.3 and later also contain vulnerabilities that have not been fixed.
As of January 1, 2022, Google no longer updates AngularJS to fix security, browser compatibility, or jQuery issues.
The usage of an alternative library is recommended.

axios

Versions before 1.20.0 contain vulnerabilities that can be read in the GitHub release note .
The vulnerability has been fixed in 1.20.0.