We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies.

We analysed almost 100 UK charity websites and found that ~1 in 6 are running vulnerable JavaScript dependencies. What stood out more though: – Some vulnerabilities were 10+ years old, including high and critical ratings – Same jQuery CVE (2015-9251) appearing across multiple organisations We’ve now seen similar patterns in the HE/FE and also hospitality sectors as well. Are we right in thinking that this feels like a visibility problem alongside budget issues more than anything else? How are you tracking dependencies effectively in your organisations? Full write-up if useful: https://cybaa.io/blog/2026-04-20/uk-health-charity-website-security-2026 submitted by /u/JoeTiedeman [link] [comments]Technical Information Security Content & DiscussionRead More