This is an automated email from the ASF dual-hosted git repository.
vatsrahul1001 pushed a commit to branch v3-3-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-3-test by this push:
new 1bb33d1d249 Added dompurify override to UI to resolve CVEs (#70819)
(#72670)
1bb33d1d249 is described below
commit 1bb33d1d249adcb9971911060eee59f9f18dcfdb
Author: Steve Ahn <[email protected]>
AuthorDate: Mon Sep 7 23:18:21 2026 -0700
Added dompurify override to UI to resolve CVEs (#70819) (#72670)
* Added dompurify override to resolve CVEs
* Regenerate pnpm-lock.yaml after rebase
---------
(cherry picked from commit af75ea5c1953cf4518a421eb839aace5b7e15489)
Signed-off-by: ivonaest <[email protected]>
Co-authored-by: Ivona Cvija <[email protected]>
---
airflow-core/src/airflow/ui/package.json | 3 ++-
airflow-core/src/airflow/ui/pnpm-lock.yaml | 9 +++++----
2 files changed, 7 insertions(+), 5 deletions(-)
diff --git a/airflow-core/src/airflow/ui/package.json
b/airflow-core/src/airflow/ui/package.json
index 112803bfc2f..7b91effcf53 100644
--- a/airflow-core/src/airflow/ui/package.json
+++ b/airflow-core/src/airflow/ui/package.json
@@ -153,7 +153,8 @@
"react-router@>=7.5.1 <7.13.2": ">=7.13.2",
"react-router@>=7.0.0 <7.15.0": ">=7.15.0",
"esbuild@>=0.17.0 <0.28.1": ">=0.28.1",
- "esbuild@>=0.27.3 <0.28.1": ">=0.28.1"
+ "esbuild@>=0.27.3 <0.28.1": ">=0.28.1",
+ "dompurify@<=3.4.13": ">=3.4.13"
}
}
}
diff --git a/airflow-core/src/airflow/ui/pnpm-lock.yaml
b/airflow-core/src/airflow/ui/pnpm-lock.yaml
index 863282d269a..5174f8aad88 100644
--- a/airflow-core/src/airflow/ui/pnpm-lock.yaml
+++ b/airflow-core/src/airflow/ui/pnpm-lock.yaml
@@ -33,6 +33,7 @@ overrides:
react-router@>=7.0.0 <7.15.0: '>=7.15.0'
esbuild@>=0.17.0 <0.28.1: '>=0.28.1'
esbuild@>=0.27.3 <0.28.1: '>=0.28.1'
+ dompurify@<=3.4.13: '>=3.4.13'
importers:
@@ -2101,8 +2102,8 @@ packages:
[email protected]:
resolution: {integrity:
sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
- [email protected]:
- resolution: {integrity:
sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==}
+ [email protected]:
+ resolution: {integrity:
sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==}
[email protected]:
resolution: {integrity:
sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
@@ -6465,7 +6466,7 @@ snapshots:
'@babel/runtime': 7.29.7
csstype: 3.2.3
- [email protected]:
+ [email protected]:
optionalDependencies:
'@types/trusted-types': 2.0.7
@@ -7862,7 +7863,7 @@ snapshots:
[email protected]:
dependencies:
- dompurify: 3.2.7
+ dompurify: 3.4.15
marked: 14.0.0
[email protected]: {}
