[1.10.14]
Update grav to 2.0.14
Full Changelog
Removed old JQuery 2.1.4. However 2.2.4 and 3.7.1 remain for legacy support
[security] An administrator with account-management rights can no longer grant themselves super-admin access by saving it into a user group's permissions, a protection the account form already had (GHSA-xhfv-7758-r9hx).
[security] The content security scan no longer reports a page as clean when it was unable to examine it, closing two ways a page editor could hide a script from it: a single invalid character anywhere in the content, and padding a tag out to several thousand characters (GHSA-q2j8-x8hf-63ch).