Secure drop-in replacements for jQuery versions  1.3.x, 1.5.x, 1.6.x, 1.7.x, 1.12.x, 2.2.x, 3.5.x

jQuery NES

Legacy jQuery versions still power mission-critical apps — but internal SLAs, CVE disclosures, and security audits don’t care.

jQuery Never-Ending Support (NES) keeps you compliant, secure, and audit-ready without an unplanned migration or risky patchwork.

Patch CVEs, Meet Internal SLAs, Pass Audits — in Minutes.

jQuery framework logo

jQuery NES

is a secure drop-in replacement for

jQuery

and takes just a few minutes to set up.

Step 1
Update your package.json
Step 2
Set up token
Step 3
Install & Run!

Open Source is Standard —
Managing It Should Be Too

According to the 2025 OSSRA report, 97% of modern codebases contain open source components. While adoption is near-universal, the real challenge lies in managing known vulnerabilities — 81% of assessed codebases had high or critical-risk issues, often due to outdated or untracked dependencies.
Vulnerabilities and Security
86%
of risk-assessed codebases contained vulnerable software
81%
of risk-assessed codebases contained high or critical-risk vulnerabilities
8 of the Top 10
high-risk vulnerabilities were found in jQuery

Percentage of codebases containing high-risk vulnerabilities by Industry

Internet and Mobile Apps
100%
Marketing Tech
88%
Computer Hardware and Semiconductors
87%
EdTech
86%
Enterprise Software/Saas
86%
Financial Services and FinTech
83%
Healthcare, Health Tech, Life Sciences
80%
Retail and eCommerce
80%
Big Data, AI, BI, Machine Learning
80%
Cibersecurity
79%
Internet and Software Infraestructure
78%
Aerospace, Aviation, Automotive, Transport, Logistics
76%
Internet of Things
72%
Virtual Reality, Gaming, Entertainment, Media
71%
Manufacturing, Industrials, Robotics
63%
Energy and Clean Tech
60%
CVE Protection

0 Security Issues Fixed in jQuery NES
(and always looking for more)

If you’re using jQuery, your site may be vulnerable to the following CVEs.

By purchasing jQuery Never-Ending Support, you ensure that these vulnerabilities are addressed promptly. HeroDevs actively remediates issues before they are publicly announced, so you can stay ahead of potential threats.

Switch to jQuery NES in minutes to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
jQuery
jQuery
Cross-Site Scripting
<1.9.0
May 19, 2020
Medium
jQuery
jQuery
Cross-Site Scripting
>=1.0.3 <3.5.0
Apr 29, 2020
Medium
jQuery
jQuery
Cross-Site Scripting
>=1.2.0 <3.5.0
Apr 29, 2020
Medium
jQuery
jQuery
Cross-Site Scripting
>=1.1.4 <3.4.0
Apr 19, 2019
Medium
jQuery
jQuery
Cross-Site Scripting
<1.12.2 >=1.12.3 <3.0.0
Jan 18, 2018
For more details on CVEs found in end-of-life software, visit our vulnerability directory.

What is Never-Ending Support?

Security icon
Security Fixes
Each new jQuery NES release addresses and fixes security issues as they are discovered and validated.
Compatibility icon
Drop-In Compatibility
A direct replacement for your framework—no migrations, no rewrites, just ongoing support.
SLA Compliance icon
SLA Compliance
Our Service Level Agreement ensures compliance with SOC 2, FedRAMP, PCI, HIPAA and other compliance standards.
Learn more.
Team of Experts icon
Team of Experts
Our NES is developed with input from jQuery contributors, ensuring high-quality support.
Easy to install icon
Easy to Install
No need for upgrades or migrations. Our expert engineers assist with a seamless transition.
Shield icon
Intellectual Property Protection
jQuery NES is not only secure; HeroDevs also offers enterprise-level protection for all HeroDevs products.
Learn more.
jQuery NES ESSENTIALS

Keep Support For The Libraries You Depend On

jQuery NES Essentials extends support to popular software packages that depend on jQuery. With an Essentials subscription, patches to jQuery NES are tested for compatibility with these packages. Vulnerabilities or browser incompatibilities discovered in those packages are fixed.

jQuery NES Essentials includes continued support for these libraries:

Why HeroDevs?

We Partner With Core Contributors

Our collaboration with jQuery's core contributors and our Gold sponsorship of the OpenJS Foundation directly enhance the reliability of our jQuery Never-Ending Support (NES) product.

By involving the very groups that maintain the library, we ensure our NES offerings are not just up-to-date but also built upon the most stable, secure foundation possible. This unique approach guarantees that our products are as reliable as the core technology they support, setting a new standard in open-source software maintenance.

HeroDevs commitment goes beyond support. We actively contribute to jQuery's evolution, ensuring your systems benefit from the latest advancements.

Give back to open source icon
We Give Back To Open Source

HeroDevs is a proud steward of the open-source community. We don't just use open-source; we nurture its growth  through sponsorships, backing core contributors, and funding events that drive the ecosystem forward. Our engagement extends beyond financial contributions, embodying a commitment to the ongoing growth and innovation of open-source software. This holistic support ensures the vitality of the open-source movement, fostering an environment of collaboration and advancement.

Related Products

If you're leveraging this technology, chances are you're also using complementary systems that face similar end-of-life (EOL) challenges.

Explore our related NES products that offer proactive, comprehensive support for your entire tech stack to ensure continuity, security, and innovation across all your essential technologies.

Frequently Asked Questions

Get answers to some of our most commonly asked questions.
Of course, if you can't find the answer you're looking for, feel free to contact us.
How does licensing work?
Does HeroDevs have an SLA for jQuery NES?
Which browsers does jQuery NES get tested against for compatibility?
Why do I need jQuery NES?
How do I install jQuery NES?
I got an error like "EOL/Obsolete Software: jQuery 1.3.x Detected." What can I do?
Leaping over technology stacks in a single bound!

Defeat Your Technical Villains

Whether it's continuous support through our Never-Ending Support (NES) library or our unparalleled professional services to get you migrated and moving forward, HeroDevs is to the rescue!

Contact Us

Got questions about Never-Ending Support for your open-source library? We're here to help!

Discover how HeroDevs NES Products can keep your systems secure and compliant.

Learn how our solutions can deliver value to your organization.

Get detailed pricing information tailored to your needs.

Trusted by industry leaders such as
Microsoft LogoBank Santander Logo
SAP LogoFinra LogoCapital One LogoGeneral Electric LogoUnqork LogoGoogle LogoValid 8 logoQueenslandRail logoGSA logoDepartment of Health logo
Talk to an Expert

By clicking “submit” I acknowledge receipt of our Privacy Policy.

Thank you! Your submission has been received!
Please enter a company email.