We have Dependabot alerts for doc repos:
https://github.com/ibexa/documentation-developer/security/dependabot/10
https://github.com/ibexa/documentation-user/security/dependabot/7We use jQuery v3.2.1, and we'd need to upgrade it to v3.4.0 for the fix. My guess is there's no exploitable issue here in this case, but it would be nice if you could verify and schedule an upgrade at some point. It looks better to resolve it, even if not exploitable. Thanks.