This is an automated email from the ASF dual-hosted git repository.
bossenti pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/streampipes.git
The following commit(s) were added to refs/heads/dev by this push:
new 839e10d85 monthly update of vulnerability report (#1644)
839e10d85 is described below
commit 839e10d85d8c45dbc25b0ce14597a98950fa126d
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Thu Jun 1 06:34:49 2023 +0200
monthly update of vulnerability report (#1644)
---
VULNERABILITY.md | 27 ++-------------------------
1 file changed, 2 insertions(+), 25 deletions(-)
diff --git a/VULNERABILITY.md b/VULNERABILITY.md
index 94c0bceaa..178bd143a 100644
--- a/VULNERABILITY.md
+++ b/VULNERABILITY.md
@@ -1,32 +1,9 @@
-<!--
- ~ Licensed to the Apache Software Foundation (ASF) under one or more
- ~ contributor license agreements. See the NOTICE file distributed with
- ~ this work for additional information regarding copyright ownership.
- ~ The ASF licenses this file to You under the Apache License, Version 2.0
- ~ (the "License"); you may not use this file except in compliance with
- ~ the License. You may obtain a copy of the License at
- ~
- ~ http://www.apache.org/licenses/LICENSE-2.0
- ~
- ~ Unless required by applicable law or agreed to in writing, software
- ~ distributed under the License is distributed on an "AS IS" BASIS,
- ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- ~ See the License for the specific language governing permissions and
- ~ limitations under the License.
- ~
- -->
-
+<!--\n ~ Licensed to the Apache Software Foundation (ASF) under one or more\n
~ contributor license agreements. See the NOTICE file distributed with\n ~
this work for additional information regarding copyright ownership.\n ~ The
ASF licenses this file to You under the Apache License, Version 2.0\n ~ (the
"License"); you may not use this file except in compliance with\n ~ the
License. You may obtain a copy of the License at\n ~\n ~
http://www.apache.org/licenses/LICENSE-2.0\n [...]
| OSV URL | Ecosystem | Package | Version | Source |
| --- | --- | --- | --- | --- |
-| https://osv.dev/GHSA-599f-7c49-w659 | Maven |
org.apache.commons:commons-text | 1.8 | pom.xml |
-| https://osv.dev/GHSA-wxqc-pxw9-g2p8 | Maven |
org.springframework:spring-core | 6.0.7 | pom.xml |
| https://osv.dev/GHSA-mjmj-j48q-9wg2 | Maven | org.yaml:snakeyaml | 1.33 |
pom.xml |
-| https://osv.dev/GHSA-px8h-6qxv-m22q | PyPI | werkzeug | 1.0.1 |
streampipes-wrapper-python/requirements.txt |
-| https://osv.dev/GHSA-xg9f-g7g7-2323 | PyPI | werkzeug | 1.0.1 |
streampipes-wrapper-python/requirements.txt |
-| https://osv.dev/PYSEC-2022-203 | PyPI | werkzeug | 1.0.1 |
streampipes-wrapper-python/requirements.txt |
-| https://osv.dev/GHSA-36jr-mh4h-2g58 | npm | d3-color | 1.4.1 |
ui/package-lock.json |
+| https://osv.dev/GHSA-j8r2-6x86-q33q | PyPI | requests | 2.24.0 |
streampipes-wrapper-python/requirements.txt |
| https://osv.dev/GHSA-36jr-mh4h-2g58 | npm | d3-color | 2.0.0 |
ui/package-lock.json |
| https://osv.dev/GHSA-ww39-953v-wcq6 | npm | glob-parent | 3.1.0 |
ui/package-lock.json |
| https://osv.dev/GHSA-4943-9vgg-gr5r | npm | quill | 1.3.7 |
ui/package-lock.json |
| https://osv.dev/GHSA-hc6q-2mpp-qw7j | npm | webpack | 5.74.0 |
ui/package-lock.json |
-| https://osv.dev/GHSA-f9xv-q969-pqx4 | npm | yaml | 2.2.1 |
ui/package-lock.json |
