Skip to content
This repository has been archived by the owner on Dec 19, 2024. It is now read-only.

Update to version v1.2.6 #40

Merged
merged 1 commit into from
Nov 21, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,14 +5,23 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [1.2.6] - 2024-11-21

### Changed

- Library updates to address [Regular Expression Denial of Service (ReDoS) in cross-spawn](https://avd.aquasec.com/nvd/cve-2024-21538)
- Library updates to address [micromatch: vulnerable to Regular Expression Denial of Service](https://avd.aquasec.com/nvd/cve-2024-4067)

## [1.2.5] - 2024-06-20

### Changed

- Library updates to address [braces: fails to limit the number of characters it can handle](https://avd.aquasec.com/nvd/2024/cve-2024-4068/)

## [1.2.4] - 2023-10-23

### Changed

- Library updates to address [Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code](https://nvd.nist.gov/vuln/detail/CVE-2023-45133)

## [1.2.3] - 2023-10-12
Expand All @@ -29,7 +38,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- Library updates to address [xml2js is vulnerable to prototype pollution](https://cwe.mitre.org/data/definitions/1321.html)
- Library updates to address [http-cache-semantics vulnerable to Regular Expression Denial of Service](https://cwe.mitre.org/data/definitions/1333.html)


## [1.2.1] - 2023-01-13

### Changed
Expand Down
4 changes: 2 additions & 2 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
Reporting Security Issues
----------------------------------------------------------------------------------------------------------
## Reporting Security Issues

We take all security reports seriously. When we receive such reports, we will investigate and
subsequently address any potential vulnerabilities as quickly as possible. If you discover a potential
security issue in this project, please notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) or
Expand Down
18 changes: 9 additions & 9 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "cw-monitoring-framework",
"description": "AWS Horus - A CloudWatch Monitoring Framework",
"license": "Apache-2.0",
"version": "1.2.5",
"version": "1.2.6",
"scripts": {
"lint": "./node_modules/eslint/bin/eslint.js . --ext .ts",
"prettier-format": "./node_modules/prettier/bin-prettier.js --config .prettierrc.yml '**/*.ts' --write",
Expand All @@ -22,4 +22,4 @@
"prettier": "^3.0.3",
"typescript": "^5.2.2"
}
}
}
14 changes: 7 additions & 7 deletions source/resources/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

14 changes: 7 additions & 7 deletions source/services/dashboardHandler/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

14 changes: 7 additions & 7 deletions source/services/helper/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

14 changes: 7 additions & 7 deletions source/services/tagHandler/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.