# Vulnerable jQuery Version Error on subdomain **URL:** \ **Category:** CMS Development\ **Tags:** javascript\ **Created:** [August 7, 2025, 1:21pm UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619 "2025-08-07T13:21:57Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![ISAnkur](https://avatars.discourse-cdn.com/v4/letter/i/5fc32e/32.png) [@ISAnkur](https://community.hubspot.com/u/ISAnkur)\ **Post date:** [August 7, 2025, 1:21pm UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619/1 "2025-08-07T13:21:57Z")
Hi HubSpot Team, We’ve conducted a security scan on two assets hosted on our HubSpot tenant: - [name.xxx.com](http://name.xxx.com) - [go.xxx.com](http://go.xxx.com) The scan detected six alerts related to a vulnerable version of **jQuery**. Upon further analysis, we have confirmed that the vulnerability is associated with the following component: - **CPE** : cpe:2.3:a:jquery:jquery:1.7.1:\*:\*:\*:\*:\*:\*:\* We would like to clarify that this is **not** a false positive due to version string heuristics or related to moment.js. This jQuery version (1.7.1) has **multiple known and publicly disclosed vulnerabilities** and is still present in the HubSpot environment serving the above assets. Please advise on: 1. Any workaround or recommended remediation steps we can take on our end. Let me know if you need more details. ---
**Author:** ![BarryGrennan](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/barrygrennan/32/97794_2.png) [@BarryGrennan](https://community.hubspot.com/u/BarryGrennan)\ **Post date:** [August 7, 2025, 1:38pm UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619/2 "2025-08-07T13:38:44Z")
@ISAnkur that looks to me like your Hubspot Portal is using the integrated version of jQuery. 1.7.x was the last version Hubspot suported. Click the cog in the top right of your dashboard. Go to Content\>Pages and scroll down on the Template tab to confirm that Include jQuery is checked. You would need to manually upgrade to the latest version. Here is the HubSpot article on how to do the upgrade: [How to upgrade jQuery](https://developers.hubspot.com/docs/guides/cms/improve-older-sites/upgrade-jquery) * * * ![profile2022a.jpg](https://d2qpr2jzcazej7.cloudfront.net/original/2X/7/7273a34ccfe3489fceebc8a36eca751481b59531.jpeg) **Barry Grennan** [Freelance HubSpot CMS Developer](https://www.seoanseo.ca?utm_source=HubSpotCommunity) [Website](https://www.seoanseo.ca?utm_source=HubSpotCommunity) | [Contact](https://www.seoanseo.ca/#contact?utm_source=HubSpotCommunity) | [LinkedIn](https://www.linkedin.com/in/barrygrennan) ---
**Author:** ![ISAnkur](https://avatars.discourse-cdn.com/v4/letter/i/5fc32e/32.png) [@ISAnkur](https://community.hubspot.com/u/ISAnkur)\ **Post date:** [August 12, 2025, 11:49am UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619/3 "2025-08-12T11:49:57Z")
@BarryGrennanAfter checking, I couldn’t find anything, but after some R&D, I discovered that the issue is with the head block. I tried overriding it using a child template, but that didn’t work either. Is there another way to update the jQuery version? ---
**Author:** ![BarryGrennan](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/barrygrennan/32/97794_2.png) [@BarryGrennan](https://community.hubspot.com/u/BarryGrennan)\ **Post date:** [August 12, 2025, 12:08pm UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619/4 "2025-08-12T12:08:41Z")
@ISAnkur hmm, I couldn’t be sure. If jQuery isn’t being loaded through Hubspot settings, next step for me would be to pull a copy of your theme to your local machine (using [Hubspot CLI](https://developers.hubspot.com/docs/guides/cms/tools/hubspot-cli/cli-v7)) and basically CTRL + F “jQuery” to see where it’s being loaded. * * * ![profile2022a.jpg](https://d2qpr2jzcazej7.cloudfront.net/original/2X/7/7273a34ccfe3489fceebc8a36eca751481b59531.jpeg) **Barry Grennan** [Freelance HubSpot CMS Developer](https://www.seoanseo.ca?utm_source=HubSpotCommunity) [Website](https://www.seoanseo.ca?utm_source=HubSpotCommunity) | [Contact](https://www.seoanseo.ca/contact?utm_source=HubSpotCommunity) | [LinkedIn](https://www.linkedin.com/in/barrygrennan) ---
**Author:** ![chighsmith](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@chighsmith](https://community.hubspot.com/u/chighsmith)\ **Post date:** [August 7, 2025, 5:40pm UTC](https://community.hubspot.com/t/vulnerable-jquery-version-error-on-subdomain/137619/5 "2025-08-07T17:40:02Z")
Hi @ISAnkur, Welcome to the Community! We’re happy to have you here 🙂 I’d like to tag in some of Community Champions to also take a look here - [@Syeda\_Fatima](https://community.hubspot.com/t5/user/viewprofilepage/user-id/114957) @stefen and @jonchim do you have any other ideas on this one? -Cassie Community Manager