Google Lighthouse reports Joomla 3.8.3 using exploitable Jquery

[JJazz]

Testing of my Joomla 3.8.3 site using Google Lighthouse in chromium reported the following:

---
Best Practices
4 Failed Audits
...
Includes front-end JavaScript libraries with known security vulnerabilities: 1 vulnerability was detected.

Some third-party scripts may contain known security vulnerabilities that are easily identified and exploited by attackers.

Library Version Vulnerability Count Highest Severity
[email protected] 1 Medium

on a report page linked to https://snyk.io/vuln/npm:[email protected]

Where jquery is found in media/jui/js, I believe (it's the only one grep found).

However CVE-2016-7103 report "Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0" (note 'before')

https://cve.mitre.org/cgi-bin/cvekey.cg ... ery+1.12.4

So this information is inconsistent? (It's a bit hard to read).

Is Joomla 3's Jquery 1.12.4 vulnerable?