New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Updates #1416

Closed

ds-mwesener opened this issue Feb 25, 2025 · 1 comment

Contributor

ds-mwesener commented Feb 25, 2025

CVE issues

Description

Current behaviour

https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/62
https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/19
https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/63

Expected behavior

CVEs to be fixed or accepted

Steps to reproduce the Bug

github-project-automation bot added this to Trace-X

github-project-automation bot moved this to inbox in Trace-X

This was referenced Feb 25, 2025

fix(frontend): 1416 fix cross-spawn dependency #1417

Merged

fix(frontend): 1416 add resolution to fix Path traversal in webpack-dev-middleware #1418

Merged

fix(frontend): 1416 add resolution to fix Denial of service in http-proxy-middleware #1419

Merged

fix(frontend): 1416 provide fix for semver vulnerability #1420

Merged

fix(tx-backend): 1415 provide fix for json-smart vulnerability #1421

Merged

Contributor

rogocof commented Feb 25, 2025 •

edited

Loading

https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/62
fixed by:
fix(frontend): 1416 add resolution to fix Path traversal in webpack-dev-middleware #1418
fix(frontend): 1416 add resolution to fix Denial of service in http-proxy-middleware #1419

https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/19
fixed by:
fix(frontend): 1416 provide fix for semver vulnerability #1420

https://github.com/eclipse-tractusx/traceability-foss/security/dependabot/63
fixed by:
fix(frontend): 1416 fix cross-spawn dependency #1417

rogocof closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment