Security review - vulnerable library

App Marketplace App Submission
1

Hi team,

We are currently undergoing a Security Review in order to make our OAuth app publicly accessible.
It has come to our attention that the system is utilizing a vulnerable library (jQuery), and we are considering upgrading to the latest version.
However, due to the widespread impact on the entire system, the fixes are taking a considerable amount of time. As a solution, we are contemplating using the latest version of jQuery exclusively for the integration with Zoom, while maintaining the functionality of other features with the previous version of jQuery (allowing coexistence of different jQuery versions).
Would this approach meet the security requirements?

Regards, Developer

2

Hello @dev_comtec Please email marketplace.security@zoom.us include the name of your app and ask the question there the security team will answer you directly.

Regards, Kwaku

3

Hi Kwaku,

Thank you for your response.
On 5/18, I sent an email directly to marketplace.security@zoom.us and I am currently awaiting a reply from the security team.

Regards