The Infosec team has scanned the portal containers and oktasign.js is showing vulnerable (still using jQuery version 1.12).
API Developer Portal 5.2
In Portal 5.2.3, Jquery has been updated to 3.6.1. This is noted in the Resolved Issues page: DE583239 Resolved a security concern related to the Portal.