Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: bump node-fetch to 2.6.7 #26091

Merged
merged 1 commit into from
Nov 27, 2023
Merged

fix: bump node-fetch to 2.6.7 #26091

merged 1 commit into from
Nov 27, 2023

Conversation

dpgaspar
Copy link
Member

SUMMARY

Bump node-fectch to 2.6.7 address CVE-2022-0235

https://nvd.nist.gov/vuln/detail/cve-2022-0235

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

  • Has associated issue:
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

@dpgaspar dpgaspar merged commit 4fc2758 into apache:master Nov 27, 2023
27 checks passed
@dpgaspar dpgaspar deleted the fix/node-fetch-vul branch November 27, 2023 09:23
@michael-s-molina michael-s-molina added the v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch label Nov 28, 2023
michael-s-molina pushed a commit that referenced this pull request Dec 4, 2023
@dpgaspar @michael-s-molina
fix: bump node-fetch to 2.6.7 (#26091)
00db4df 
(cherry picked from commit 4fc2758)
josedev-union pushed a commit to Ortege-xyz/studio that referenced this pull request Jan 22, 2024
@dpgaspar @josedev-union
fix: bump node-fetch to 2.6.7 (apache#26091)
32645dc
cccs-rc pushed a commit to CybercentreCanada/superset that referenced this pull request Mar 6, 2024
@dpgaspar
fix: bump node-fetch to 2.6.7 (apache#26091)
6b1197e
@mistercrunch mistercrunch added 🍒 3.0.3 🍒 3.0.4 🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 3.1.0 labels Mar 8, 2024
sfirke pushed a commit to sfirke/superset that referenced this pull request Mar 22, 2024
@dpgaspar @sfirke
fix: bump node-fetch to 2.6.7 (apache#26091)
bf0ef26
vinothkumar66 pushed a commit to vinothkumar66/superset that referenced this pull request Nov 11, 2024
@dpgaspar
fix: bump node-fetch to 2.6.7 (apache#26091)
802ccb8
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@etr2460 etr2460 etr2460 approved these changes

@michael-s-molina michael-s-molina Awaiting requested review from michael-s-molina

Assignees
No one assigned
Labels
🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels size/XS v3.0 Label added by the release manager to track PRs to be included in the 3.0 branch 🍒 3.0.3 🍒 3.0.4 🚢 3.1.0
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@dpgaspar @etr2460 @mistercrunch @michael-s-molina