# SONATYPE-2019-0115 PrimeFaces Issue

**URL:** <https://community.sonatype.com/t/sonatype-2019-0115-primefaces-issue/1915>\
**Category:** Sonatype Lifecycle & Firewall\
**Created:** [May 24, 2019, 11:36am UTC](https://community.sonatype.com/t/sonatype-2019-0115-primefaces-issue/1915 "2019-05-24T11:36:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![melloware](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/melloware/32/726_2.png) [@melloware](https://community.sonatype.com/u/melloware)\
**Post date:** [May 24, 2019, 11:36am UTC](https://community.sonatype.com/t/sonatype-2019-0115-primefaces-issue/1915/1 "2019-05-24T11:36:36Z")

</div>

SONATYPE-2019-0115 is to report the Jquery 3.3.1 CVE. There are a couple of issues.

1. It is only being reported for PrimeFaces 7.0 when it should be reported for all versions of Primefaces 1.0-7.0 because they all use Jquery \< 3.4.0.

2. This has been fixed in PrimeFaces 7.0.4 could you mark that as the fix version for this one? See this ticket that it has been upgraded to Jquery 3.4.1 in PF 7.0.4. [JQuery: Upgrade to 3.4.1 · Issue #4747 · primefaces/primefaces · GitHub](https://github.com/primefaces/primefaces/issues/4747)

Thanks,

Melloware

---

<div class="post-metadata">

**Author:** ![rseddon](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/rseddon/32/341_2.png) [@rseddon](https://community.sonatype.com/u/rseddon)\
**Post date:** [May 28, 2019, 4:51pm UTC](https://community.sonatype.com/t/sonatype-2019-0115-primefaces-issue/1915/2 "2019-05-28T16:51:56Z")

</div>

Support is the right place to ask for help with data issues. Please raise a ticket for this in our support system:

[https://support.sonatype.com](https://support.sonatype.com)

Rich