All ideas
Security Vulnerability: Outdated moment.js in Client Script
A customer reported that Sleekplan's embedded feedback widget loads an outdated version of moment.js (v2.24.0) from client.sleekplan.com, which contains known vulnerabilities (CVE-2022-31129, CVE-2022-24785). This poses a security risk for users embedding the widget on their sites. Suggestions: Update the moment.js library to the latest secure version in all client-side scripts. Regularly audit third-party dependencies for vulnerabilities. Communicate resolution status to affected/reporting users. Reference: Conversation ID 215471433037551
