jQuery-ui vulnerability to xss attack

I’m wondering about the version of jQuery UI currently used in WordPress… there was a similar post here but it was closed already. I’ve been told that version 1.11.4 has an XSS vulnerability, and it would be good to upgrade to 1.12.0 or later… but I’m not sure how to do this if it’s the WordPress core including this script. I’m assuming a newer version could be enqued, but I’m not super familiar with how WordPress is using it and am hesitant to override the core. Anyone have any thoughts about this?