This is an automated email from the ASF dual-hosted git repository.
bossenti pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/streampipes.git
The following commit(s) were added to refs/heads/dev by this push:
new 775797c9cc monthly update of vulnerability report (#2804)
775797c9cc is described below
commit 775797c9cc1401d10dc1eb8e310f3cafed56085e
Author: github-actions[bot]
<41898282+github-actions[bot]@users.noreply.github.com>
AuthorDate: Wed May 1 07:04:53 2024 +0200
monthly update of vulnerability report (#2804)
Signed-off-by: bossenti <[email protected]>
Co-authored-by: bossenti <[email protected]>
---
VULNERABILITY.md | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/VULNERABILITY.md b/VULNERABILITY.md
index 253128c4a0..60e925573f 100644
--- a/VULNERABILITY.md
+++ b/VULNERABILITY.md
@@ -4,5 +4,11 @@
| https://osv.dev/GHSA-6mjq-h674-j845 | 6.5 | Maven | io.netty:netty-handler |
4.1.72.Final | pom.xml |
| https://osv.dev/GHSA-w596-4wvx-j9j6<br/>https://osv.dev/PYSEC-2022-42969 |
7.5 | PyPI | py | 1.11.0 | streampipes-client-python/poetry.lock |
| https://osv.dev/GHSA-269g-pwp5-87pp | 4.4 | Maven | junit:junit (dev) |
4.8.2 | streampipes-maven-plugin/pom.xml |
+| https://osv.dev/GHSA-wf5p-g6vw-rhxx | 6.5 | npm | axios | 0.21.4 |
ui/package-lock.json |
+| https://osv.dev/GHSA-rv95-896h-c2vc | 6.1 | npm | express (dev) | 4.18.3 |
ui/package-lock.json |
+| https://osv.dev/GHSA-cxjh-pqwp-8mfp | 6.5 | npm | follow-redirects | 1.15.5
| ui/package-lock.json |
| https://osv.dev/GHSA-4943-9vgg-gr5r | 6.1 | npm | quill | 1.3.7 |
ui/package-lock.json |
-| https://osv.dev/GHSA-wr3j-pwj9-hqq6 | 7.4 | npm | webpack-dev-middleware
(dev) | 6.1.1 | ui/package-lock.json |
+| https://osv.dev/GHSA-f5x3-32g6-xq36 | 6.5 | npm | tar (dev) | 6.2.0 |
ui/package-lock.json |
+| https://osv.dev/GHSA-9qxr-qj54-h672 | 2.6 | npm | undici (dev) | 6.7.1 |
ui/package-lock.json |
+| https://osv.dev/GHSA-m4v8-wqvr-p9f7 | 3.9 | npm | undici (dev) | 6.7.1 |
ui/package-lock.json |
+| https://osv.dev/GHSA-8jhw-289h-jh2g | 5.9 | npm | vite (dev) | 5.1.5 |
ui/package-lock.json |
