Hi! We recently upgraded jquery-ui to version 1.13.2 for fixing vulnerabilites, but our security scanning tool detected two issues from jquery-ui. It seems like the issues are already existing in the previous version, not introduced by the latest version, so I'm wondering, are they in the process of fixing, or they have been investigated but dismissed please?
The details of these two issues are as followed:

1. In line 912 of jquery-ui.js, target = typeof options.of === "string" ? $( document ).find( options.of ) : $( options.of ), The detected issue is potential XSS vulnerability in the '$.fn.position' plugin.
2. In line 17945 of jquery-ui.js, return hash ? hash.replace( /[!"$%&'()*+,.\/:;<=>?@\[\]\^`{|}~]/g, "\\$&" ) : "";, the detected issue is Incomplete string escaping or encoding -- This does not escape backslash characters in the input.

Thanks!