Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 22 vulnerabilities #331

Open
wants to merge 198 commits into
base: master
Choose a base branch
from
Open

[Snyk] Fix for 22 vulnerabilities #331

wants to merge 198 commits into from

Conversation

VaniHaripriya
Copy link
Owner

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • frontend/server/package.json
    • frontend/server/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-ASYNC-2441827		 Yes Proof of Concept
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857		 No Proof of Concept
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-AXIOS-6144788		 No No Known Exploit
high severity 761/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.8		 Server-side Request Forgery (SSRF)
SNYK-JS-AXIOS-7361793		 No Proof of Concept
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Uncontrolled resource consumption
SNYK-JS-BRACES-6838727		 Yes Proof of Concept
medium severity 386/1000
Why? Recently disclosed, CVSS 6.3		 Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060		 No No Known Exploit
high severity 574/1000
Why? Has a fix available, CVSS 7.2		 Use of Weak Hash
SNYK-JS-CRYPTOJS-6028119		 Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-DATEANDTIME-1054430		 Yes No Known Exploit
medium severity 631/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.2		 Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		 No Proof of Concept
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-JSONBIGINT-608659		 Yes Proof of Concept
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728		 Yes No Known Exploit
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Open Redirect
SNYK-JS-NODEFORGE-2330875		 Yes Proof of Concept
medium severity 529/1000
Why? Has a fix available, CVSS 6.3		 Prototype Pollution
SNYK-JS-NODEFORGE-2331908		 Yes No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430337		 Yes No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430339		 Yes No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Improper Verification of Cryptographic Signature
SNYK-JS-NODEFORGE-2430341		 Yes No Known Exploit
high severity 686/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.3		 Prototype Pollution
SNYK-JS-NODEFORGE-598677		 Yes Proof of Concept
high severity 676/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.1		 Improper Privilege Management
SNYK-JS-SHELLJS-2332187		 No Proof of Concept
medium severity 596/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.5		 Arbitrary Code Injection
SNYK-JS-UNDERSCORE-1080984		 No Proof of Concept
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 No No Known Exploit
medium severity 586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3		 Prototype Pollution
SNYK-JS-XML2JS-5414874		 No Proof of Concept
low severity 506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		 Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @google-cloud/storage The new version differs by 250 commits.

See the full diff

Package name: @kubernetes/client-node The new version differs by 250 commits.

See the full diff

Package name: axios The new version differs by 73 commits.

See the full diff

Package name: crypto-js The new version differs by 47 commits.

See the full diff

Package name: express The new version differs by 2 commits.

See the full diff

Package name: minio The new version differs by 136 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Server-side Request Forgery (SSRF)
🦉 More lessons are available in Snyk Learn

chensun and others added 30 commits April 30, 2024 21:38
@chensun
chore: Update RELEASE.md (kubeflow#10767)
5f80285 
Signed-off-by: Chen Sun <chensun@users.noreply.github.com>
fix(components): Add input param autorater_prompt_parameters to `on…
cf7450b 
…line_evaluation_pairwise` component

PiperOrigin-RevId: 629549849
feat(components): create infer preprocessor component
e9d6876 
PiperOrigin-RevId: 629556915
feat(components): create utility class for preprocessors and use it i…
cd16a33 
…n rlhf preprocessor and infer preprocessor

PiperOrigin-RevId: 630245237
@rickyxie0929
chore(sdk): drop Python 3.7 for kfp sdk (kubeflow#10750)
2f3dd3d 
* chore(components): Drop GCPC Python 3.7
PiperOrigin-RevId: 627500444

**Description of your changes:**

**Checklist:**
- [ ] The title for your pull request (PR) should follow our title convention. [Learn more about the pull request title convention used in this repository](https://github.com/kubeflow/pipelines/blob/master/CONTRIBUTING.md#pull-request-title-convention).
<!--
   PR titles examples:
    * `fix(frontend): fixes empty page. Fixes kubeflow#1234`
       Use `fix` to indicate that this PR fixes a bug.
    * `feat(backend): configurable service account. Fixes kubeflow#1234, fixes kubeflow#1235`
       Use `feat` to indicate that this PR adds a new feature.
    * `chore: set up changelog generation tools`
       Use `chore` to indicate that this PR makes some changes that users don't need to know.
    * `test: fix CI failure. Part of kubeflow#1234`
        Use `part of` to indicate that a PR is working on an issue, but shouldn't close the issue when merged.
-->

* drop support python3.7

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix tes

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* fix test

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* remove kfp related

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* remove kfp related

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* just kfp change

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* only change in kubernetes_platform/python/setup.py

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* only change in init.py

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* change

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* change

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* Update release

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* Update base image

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* change test python 3.7 to python 3.8

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* update golden snapshot

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* update yaml to python3.8 under kubernetes_platform/python/test/snapshot/data/toleration.yaml

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* update yaml python 3.8 for sdk/python/test_data/pipelines/parallelfor_fan_in

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* update yaml to fix tests

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* Update Readme

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* Update kubernetes_setup python version

Signed-off-by: rickyxie0929 <rickyxie@google.com>

* Update readme

Signed-off-by: rickyxie0929 <rickyxie@google.com>

---------

Signed-off-by: rickyxie0929 <rickyxie@google.com>
@chensun
chore: Promote @rimolive as a backend approver (kubeflow#10780)
804ee00 
Signed-off-by: Chen Sun <chensun@users.noreply.github.com>
feat(components): use preprocessor utility methods for the upload mod…
7908ed6 
…el graph

PiperOrigin-RevId: 631266689
@HumairAK
chore: upgrade node to v18 (kubeflow#10794)
d91a70a 
Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>
@shruti2522
feat(GH workflow): migrate periodic functional tests to GH actions (k…
c4d7ec3 
…ubeflow#10751)

* periodic functional tests migration

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

feat: migrate periodic functional tests to GH actions

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

feat: migrate periodic functional tests to GH actions

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

feat: migrate periodic functional tests to GH actions

feat: migrate periodic functional tests to GH actions

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

feat: migrate periodic functional tests to GH actions

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

* updated kind installation and artifact collection

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

* updated artifact collection code

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

* updated version

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

* updated path

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

* added log_dir

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>

---------

Signed-off-by: shruti2522 <shruti.apc01@gmail.com>
@gmfrasca
chore: Add Container Engine and Image Tag parameters to backend Makef…
3da46b6 
…iles (kubeflow#10725)

When building images via `make`:
- Allow users to specify an alternate Container Engine rather than docker
- Allow users to specify image names/tags rather than a hardcoded image
  name and `latest` tag for backend images

Signed-off-by: Giulio Frasca <gfrasca@redhat.com>
@HumairAK
chore: add meaningful logs to client initialization. (kubeflow#10801)
92046be 
Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>
@hsteude
feat(kubernetes_platform): Update kubernetes_platform go package to i…
7c63599 
…nclude EnabledSharedMemory (kubeflow#10703)

Signed-off-by: hsteude <henrik.steude@prokube.ai>
@TheMichaelHu
feat(components): Retry on batch prediction internal errors in AutoSxS
5d9f4ab 
Signed-off-by: Michael Hu <humichael@google.com>
PiperOrigin-RevId: 631917851
@TheMichaelHu
fix(components): Add staging and temp locations to prophet trainer co…
00440f7 
…mponent

Signed-off-by: Michael Hu <humichael@google.com>
PiperOrigin-RevId: 631958163
fix(components): Remove unused import function_based from infer pipeline
e369bd3 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 631959982
docs(components): Bump the python version to 3.8
61a1166 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 632325315
chore(components): GCPC 2.14.1 Release
0c8950a 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 632575448
chore(components): Rollback GCPC 2.14.1 Release due to b/339911077
06c0816 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 632653742
chore(components): Add TaskError proto
606bcfa 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 634137095
chore(components): GCPC 2.14.1 Release
61331d2 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 634900210
feat(components): Create the write_user_defined_error function
454a654 
Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 635894975
@tmvfb
test: fix CI failure for periodic functional tests (kubeflow#10817)
c18ec0b 
Signed-off-by: Igor Kvachenok <igor.kvachenok@prokube.ai>
@haoxins
chore(docs): Fix link (kubeflow#7533)
a9d5d07
@DharmitD
chore: Update Periodic Functional Tests to run once a day (kubeflow#1…
d7e39e9 
…0842)

Signed-off-by: ddalvi <ddalvi@redhat.com>
@tmvfb
test: fix version conflict for functional tests (kubeflow#10837)
1d5e83b 
Signed-off-by: Igor Kvachenok <igor.kvachenok@prokube.ai>
@DharmitD @HumairAK
chore: server should skip sample load if path DNE (kubeflow#10833)
01ee4af 
Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>
Co-authored-by: Humair Khan <HumairAK@users.noreply.github.com>
@droctothorpe @quinnovator
@tarat44 @owmasch
fix(frontend): reduce list run latency (kubeflow#10797)
768ece4 
* fix(frontend): reduce list run latency

Signed-off-by: droctothorpe <mythicalsunlight@gmail.com>
Co-authored-by: quinnovator <jack@jq.codes>
Co-authored-by: tarat44 <32471142+tarat44@users.noreply.github.com>
Co-authored-by: owmasch <owenmaschal0598@gmail.com>

* Handle multi-user deployments

Signed-off-by: droctothorpe <mythicalsunlight@gmail.com>

---------

Signed-off-by: droctothorpe <mythicalsunlight@gmail.com>
Co-authored-by: quinnovator <jack@jq.codes>
Co-authored-by: tarat44 <32471142+tarat44@users.noreply.github.com>
Co-authored-by: owmasch <owenmaschal0598@gmail.com>
@TheMichaelHu
feat(components): Support parsing Gemini BP outputs in AutoSxS pipeline
b4f91a3 
Signed-off-by: Michael Hu <humichael@google.com>
PiperOrigin-RevId: 638080280
feat(components): Use GetModel integration test to manually test writ…
609c637 
…e_user_defined_error function

Signed-off-by: Googler <nobody@google.com>
PiperOrigin-RevId: 638523242
@vamsi-01
docs: modified the ConfigMap as Env variable example in README.md wit…
6d3b8c3 
…h right key_name within use_config_map_as_env() block. (kubeflow#10855)

Signed-off-by: Vamsi Mathala <vmathala@redhat.com>
Co-authored-by: Vamsi Mathala <vmathala@vmathala-thinkpadp1gen4i.punetw6.csb>
CarterFendley and others added 26 commits September 23, 2024 18:40
@CarterFendley
fix(workflows): patch reversed launcher / driver in workflow matrix (k…
ceeda01 
…ubeflow#11238)

Signed-off-by: carter.fendley <carter.fendley@gmail.com>
@PaulinaPacyna
chore: Remove PaulinaPacyna from reviewers (kubeflow#11242)
be6adb6 
Signed-off-by: paulinapk <paulinapk@google.com>
@hbelmiro
test: Fixed kubeflow-pipelines-integration-v2 workflow (kubeflow#11244)
880e46d 
Signed-off-by: Helber Belmiro <helber.belmiro@gmail.com>
@DharmitD @gregsheremeta
feat(sdk): Allow disabling default caching via a CLI flag and env var (…
3f49522 
…kubeflow#11222)

* feat(sdk): Allow setting a default of execution caching disabled via a compiler CLI flag and env var

Co-authored-by: Greg Sheremeta <gshereme@redhat.com>
Signed-off-by: ddalvi <ddalvi@redhat.com>

* Add tests for disabling default caching var and flag

Signed-off-by: ddalvi <ddalvi@redhat.com>

---------

Signed-off-by: ddalvi <ddalvi@redhat.com>
Co-authored-by: Greg Sheremeta <gshereme@redhat.com>
@ElayAharoni @HumairAK @gregsheremeta
feat(frontend/backend): Allow the ability to sort experiments by last…
db8669c 
… run creation. Fixes kubeflow#10884 (kubeflow#11163)

* UPSTREAM: <carry>: add last_run_creation

Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>

* Allow-the-ability-to-sort-Experiments-by-last-run-creation-kubeflow#10884

Signed-off-by: Elay Aharoni (EXT-Nokia) <elay.aharoni.ext@nokia.com>

* UPSTREAM: <carry>: chore(backend): Rename UpdateLastRun -> SetLastRunTimestamp

follup up to bf77909. Rename UpdateLastRun -> SetLastRunTimestamp

also tweak a related log message

Signed-off-by: Greg Sheremeta <gshereme@redhat.com>

* UPSTREAM: <carry>: chore(backend): Rename UpdateLastRun -> SetLastRunTimestamp

follup up to bf77909. Rename UpdateLastRun -> SetLastRunTimestamp

also tweak a related log message

Signed-off-by: Greg Sheremeta <gshereme@redhat.com>

---------

Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>
Signed-off-by: Elay Aharoni (EXT-Nokia) <elay.aharoni.ext@nokia.com>
Signed-off-by: Greg Sheremeta <gshereme@redhat.com>
Co-authored-by: Humair Khan <HumairAK@users.noreply.github.com>
Co-authored-by: Elay Aharoni (EXT-Nokia) <elay.aharoni.ext@nokia.com>
Co-authored-by: Greg Sheremeta <gshereme@redhat.com>
@chensun
chore: adding HumairAK to root OWNERS (kubeflow#11253)
feacb52 
Signed-off-by: Chen Sun <chensun@users.noreply.github.com>
@ntny
feat(backend): add configurable S3 path style support (kubeflow#11246)
85fdd73 
Signed-off-by: ntny <ntny1986@gmail.com>
@hbelmiro
chore: adding @hbelmiro to backend reviewers (kubeflow#11256)
6c3ab39 
Signed-off-by: hbelmiro <helber.belmiro@gmail.com>
Signed-off-by: Helber Belmiro <helber.belmiro@gmail.com>
@hbelmiro
chore: pinned estroz/rerun-actions version (kubeflow#11257)
f4cdbeb 
Signed-off-by: hbelmiro <helber.belmiro@gmail.com>
Signed-off-by: Helber Belmiro <helber.belmiro@gmail.com>
@gmfrasca
feat(backend): Remove PipelineSpec Template storage from ObjStore res…
374b18b 
…ponsibilies. Fixes kubeflow#10509 (kubeflow#10790)

* feat(backend): Remove PipelineSpec Template storage from ObjStore responsibilies. Fixes kubeflow#10509

Signed-off-by: Giulio Frasca <gfrasca@redhat.com>

* chore: Remove BadObjStore unit tests (no longer applicable)

Signed-off-by: Giulio Frasca <gfrasca@redhat.com>

* test: Update backend unit tests to not retrieve PipelineSpec from mock ObjStore

- Add PipelineSpec to mock PVs as they are no longer retrieved from
  ObjStore

Signed-off-by: Giulio Frasca <gfrasca@redhat.com>

---------

Signed-off-by: Giulio Frasca <gfrasca@redhat.com>
@b4sus
fix(backend): randomizing output uri path to avoid overwriting. Fixes k…
219725d 
…ubeflow#10186 (kubeflow#11243)

Signed-off-by: b4sus <jurob19@gmail.com>
@HumairAK
correct lastrun unittest timestamps (kubeflow#11270)
6f6c8ae 
Signed-off-by: Humair Khan <HumairAK@users.noreply.github.com>
@dependabot
chore(deps): bump rollup from 2.63.0 to 2.79.2 in /frontend (kubeflow…
8590ec1 
…#11254)

Bumps [rollup](https://github.com/rollup/rollup) from 2.63.0 to 2.79.2.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v2.63.0...v2.79.2)

---
updated-dependencies:
- dependency-name: rollup
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump webpack from 5.90.3 to 5.95.0 in /frontend (kubeflo…
03b488d 
…w#11271)

Bumps [webpack](https://github.com/webpack/webpack) from 5.90.3 to 5.95.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.90.3...v5.95.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@chensun
chore(doc): Update kfp-kubenetes release instructions. (kubeflow#11276)
c27df6f 
* chore(doc): Update kfp-kubenetes release instructions.

Signed-off-by: Chen Sun <chensun@users.noreply.github.com>

* Update RELEASE.md

Signed-off-by: Chen Sun <chensun@users.noreply.github.com>

---------

Signed-off-by: Chen Sun <chensun@users.noreply.github.com>
@zazulam
fix(backend): set default value to true for ForcePathStyle (kubeflow#…
391de8c 
…11281)

Signed-off-by: zazulam <m.zazula@gmail.com>
@VaniHaripriya
Added new Github Action workflow to verify CI checks
91328b1 
Signed-off-by: vmudadla <vmudadla@redhat.com>
@jsondai
fix(components): remove default prediction column names in evaluation…
753a2f1 
… regression component to fix issues with bigquery data source

Signed-off-by: Jason Dai <jsndai@google.com>
PiperOrigin-RevId: 684488025
@CarterFendley
feat(workflows): use built images in Github workflows (kubeflow#11284)
1550b36 
* Patch deployments and include debugging info

Signed-off-by: carter.fendley <carter.fendley@gmail.com>

* Build and use driver / launcher too!

Signed-off-by: carter.fendley <carter.fendley@gmail.com>

* Modify waiting status message

Signed-off-by: carter.fendley <carter.fendley@gmail.com>

* Fix typo

Signed-off-by: carter.fendley <carter.fendley@gmail.com>

---------

Signed-off-by: carter.fendley <carter.fendley@gmail.com>
@VaniHaripriya
test: Integrate Git Hub Action Results into Tide (kubeflow#11262)
4ccb047 
Signed-off-by: vmudadla <vmudadla@redhat.com>
@VaniHaripriya
update wf
8e40aff
@VaniHaripriya
update wf
f0fb537
@VaniHaripriya
update wf
02ee85a
@VaniHaripriya
update wf
c7808fe
@VaniHaripriya
Merge pull request #330 from VaniHaripriya/ghaction-tide-integration
b30330f 
Ghaction tide integration
@snyk-bot
fix: frontend/server/package.json & frontend/server/package-lock.json…
329dbbb 
… to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ASYNC-2441827
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
- https://snyk.io/vuln/SNYK-JS-AXIOS-6144788
- https://snyk.io/vuln/SNYK-JS-AXIOS-7361793
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-COOKIE-8163060
- https://snyk.io/vuln/SNYK-JS-CRYPTOJS-6028119
- https://snyk.io/vuln/SNYK-JS-DATEANDTIME-1054430
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-JSONBIGINT-608659
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2330875
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2331908
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430337
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430339
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-2430341
- https://snyk.io/vuln/SNYK-JS-NODEFORGE-598677
- https://snyk.io/vuln/SNYK-JS-SHELLJS-2332187
- https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
- https://snyk.io/vuln/SNYK-JS-XML2JS-5414874
- https://snyk.io/vuln/npm:debug:20170905
@github-actions github-actions bot added the Stale label Jan 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
Stale
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.