CVE-2015-9251

jquery 2.2.4 Found in https://[bitbucket.url]/s/8e4cf074d3410ea25b8aed94f7c727d6-CDN/2101862398/d728021/1937/154057b82430b23e11bfb75940567a2c/_/download/contextbatch/js/_super/batch.js?locale=en-US\\
Vulnerability info:
Medium 2432 3rd party CORS request may execute CVE-2015-9251 1234
Medium CVE-2015-9251 11974 parseHTML() executes scripts in event handlers

Atlassian Bitbucket v5.14.1

jquery-migrate 1.2.1 Found in https://d301sr5gafysq2.cloudfront.net/cd69d845441f/dist/webpack/common.js\\
Vulnerability info:
Medium 11290 Selector interpreted as HTML 12
jquery 2.1.4 Found in https://d301sr5gafysq2.cloudfront.net/cd69d845441f/dist/webpack/common.js\\
Vulnerability info:
Medium 2432 3rd party CORS request may execute CVE-2015-9251 1234
Medium CVE-2015-9251 11974 parseHTML() executes scripts in event handlers 123

Bitbucket cloud:
https://bitbucket.org/dashboard/issues