I deployed a development version of CKAN for internal testing a few months ago, I used version 2.7.2 and had to hack my way around the .py files, requirements, and even had to heavily modify solr 6.5.0.
My company now wants to deploy CKAN on a production scale, however I have run into the issue of an outdated version of JQUERY being run. The IT sec officer has told me that we are unable to go live running this version of jquery unless I can specify why this version is not vulnerable specifically with CKAN (with proper documentation) or upgrade it.
I ran into some major issues which has brought down our internal testing site and broke my custom theme completely after upgrading. Even though the change was committed before the release of 2.7.2 it does not seem to be included with the release, so I was forced to upgrade to 2.8.0a.
Is there any documentation on the security features of CKAN's previous (an more stable) versions?
Which version is most stable?
Thanks